A cyberattack on a major US financial institution would affect more than a third of bank assets, New York Fed warns