Somewhat ironic considering you'd think banks would do a security assessment of the technologies they use.