The details of more than 12 million customers - nearly triple the number originally feared - were lost by Bank of New York Mellon (BNY Mellon).