Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information.

A Moscow court on Wednesday placed 19-year-old Denis Fridman under house arrest until December 8 in connection with the Dodo Pizza breach, which reportedly involved the theft of records related to hundreds of millions of orders placed over 15 years. He faces charges connected to the illegal handling of computer information containing personal data.

Fridman is one of four alleged members of DataSuckers, a financially motivated hacking group that has claimed responsibility for recent attacks on major businesses in Russia and Ukraine. Two other suspects have been detained while a fourth remains at large, according to Russian newspaper Kommersant and Telegram news outlet Baza. The suspects reportedly include citizens of Russia, Kazakhstan and Belarus.