Re: "They looked for the password on the CD . . ."
Some 8 years ago I opened a bank account with Santander, they did not understand security:
* they sent the username for on-line banking in a clear text email; the password was in another email sent 1/2 second later.
* we went in, took all the documents needed to open a bank account (passport, etc); they took a copy; a month later ''we have lost them, please scan and send the images by email". (I refused to do so)
* I complained that important, security related documents were lost. They assured me that they were quite safe: but were unable to explain how they knew so since they did not know where they were.
And so it went on. The account has been closed for many years, final statement showing a NIL balance - but every 6 months I get a letter telling me that there are a couple of quid there (I have checked - there is not).