Apparently a system upgrade allowed five individuals to withdraw non-existent money from their own accounts to other accounts. They did this repeatedly over a few days, amounting in about 400 million ISK, or over 3 million USD.