I strongly encourage that this be publicized. I'm sure that if news outlets were made aware of this example of "secure" banking, it would get a lot of play.
Not to mention getting a much quicker reimbursement!
Looks like outsourcing might not be such a bargain if you have many more incidents like this...shudder...