Banks too...
It's quite clear that many large institutions do not protect the data properly.
Westpac Bank Australia,
My father in-law had an account with them Eg. Mr. Smith As he was not internet savvy, we added my personal email address for any required emails. It was the only place we ever associated my email with his name.
A while later came the typical grammatically challenged phishing email, To: jones at jones.com
Dear Mr Smith, Your account... I still have it on file somewhere.
Changed banks after that... if they can't look after an email address, how can they be trusted with money.
Biting the hand that feeds IT
