Amazing
I work for a large multinational financial instiution with very close ties to banks and it always amazes me to see stories like this. Banks get away with murder. We have extremely strict secure data disposal and storage policies and an Audit department that can smell you just thinking about changing someones AD permissions without the required management authorisation from a mile away. Why do banks find implementing basic data protection and security such a difficulty?
It doesn't help that they are so laughably behind the times in terms of tecnology. In the last few years we have been told by one major bank that there isn't a single DVD drive in the entire IT department, another bank still sends us unencrypted data on floppy disk in the post (addressed to my boss's predecessor's predecessor) and until very recently we were still having to send reel-to-reel tapes to a major international bank.
Crazy.