Attorney-client privilege applies to communication for the purpose of obtaining legal advice and it typically excludes anything already disclosed to a third party, like the bank in this case.
That's a good argument for using PGP/GPG/some other secure communication protocol.
There was one email provider that didn't, remember what happened to it?