Or maybe not.
Customers choose banks for their reliability and their support.
The entire bank-system, wherever it's located, relies on the trust and confidentiality of its client's records. This bank however failed to deliver that trust, that confidentiality. A server connected to the net shouldn't contain any customer info, it shouldn't contain credit card info, neither should it have access to the local database server. If banks don't know how to setup their system right, then they cannot guarantee the safety of its users. In modern business, it's not the crook that we fear, but the honest man that does not know what he is doing.