The incident shows that financial data anywhere on the web is a potential target for criminals.