Sure it is. Banks take very seriously the privacy of their clients. For example, in the Talvest situation, sure, there was a clear risk, a reasonable risk, that the information could be used for fraud or identity theft, and the bank acted responsibly.
