The scheme targeted thousands of people, and involved the compromise of a Department of Defense portal that military members use to access their benefits.