US authorities have charged 11 people in what is thought to be the largest hacking and ID theft case of its kind.