It turns out Citibank was hacked in early May. Wait, you hadn't heard? Me neither. Well, that's just because Citibank chose to keep quiet about it until now.[time.com]

Also:

Most U.S. banks currently allow customers to easily access their accounts online or on mobile devices without jumping through too many security hurdles to confirm their identities.[reuters.com]
[[reuters.com