This is the same sort of exploit used in the "Phone hacking" scandal that News of the World and other newspapers got in trouble for. Except in that case they were hacking voicemail boxes not bank accounts. This is pretty serious and not exactly a novel idea, very surprised that BoA hasn't encountered this problem yet.