[plaguuuuuu]

Yep. Knowing various people who have done security work for banks and similar organisations, I've heard a few hair-raising stories.

They never ever disclose when they get hacked. And they do get hacked.