[twistedpair]

Having worked at a similar iBank, I can assure you most people don't give a rat's ass about proper procedures until they're caught. Why it was even possible to send an email to an external address with such an unencrypted attachment is a bigger question. I hope the lucky recipient finds a high bidder for said information.