Not as a counterpoint, but you'd be mad not to stick "yet" at the end of that.
You still likely have a limited window. Once their obligations to keep your info are up, they're likely to purge it. It's a waste of resources to keep that around and not much value. Plus they surely know it's a liability. PII is treated very carefully in regulated industries. The less of it they have, the better.
Only accessible to the bank and every megacorp they're selling your data to