Major banks, including JPMorgan and Citi, warned of data exposure after hack, NYT reports