Not surprised
At some point the only way security is take seriously is when a major corporation has to pay a rather large sum that is many times what would have cost to do it right the first time.
Target may be able to fend off the card holders and other assorted small fry but major banks is whole new league.