Bug closed, no longer an issue, overcome by events.
And, if you are willing to share, what country/bank?
I'd be more worried about people hacking into networked security camera DVRs at stores and cafes and extracting image data from there. Multiple angles. Movement. Some are very high resolution these days. Sometimes they're mounted right on the POS, in your face. Sometimes they're actually in the top bezel of the beverage coolers.
Banks are the hardest way to get this data, not the easiest one.
Is this statement based on data or a hunch? A quick google turns up a lot of bank data breaches.
Because banks have to report data breaches. Do you think every neighborhood Gas-N-Blow is publicizing, or even knows, that it's been hacked?
Mandatory reporting certainly helps IMO. Reporting should be mandatory for anyone handling PII.
(That's what Chase's fraud department tells you to do.. no joke)
Fuck these biometeric data farmers.
I hope they delete the data immediately after use.
In the eventuality that robust deepfake technology to provide fluid real-time animation of my head from limited data sources exists and someone actually wants to use it against me, they can probably find video content involving the side of my head from some freely available social network anyway.
At least with housing they don't ask me to input the information I've already sent them into their crappy website.