There should be other options there, such as informing the bank of their security hole.