to us as well! We couldn't access our own bank account but would be able to access random ones. We could download some sensitive user data