[run4yourlives]

Let's assume for a second that this wasn't a hacker, but a malicious employee. In your world is the bank still liable for this?

[tptacek]

No, because even using countermeasures that meet or exceed industry best practices, a malicious employee could be expected to gain access to the account. Unlike this case, the internal fraud would be entirely outside the bank's control.