Recently, my bank (Australia) was hacked and data stolen. How do I know ? Because, every day I get a spam email ( From @mybank.com ) which has my account numbers , the stocks I have traded and some other personal info that only my bank has and asks me to change my password. It also contains a link that goes to the third party website with a phishing page.
The big 4 banks here are very insecure and any one with even a mediocre knowledge of sysadmin can get into them. Alas, even after having billions in revenue they don'e have a bug bounty. Shame they take our money but do not take our privacy seriously.