Perhaps, but unless he signed an NDA or something it's actually pretty hard for the bank. US copyright law gives an implicit license to the recipient - and data cannot be copyrighted so reformatting would actually make that difficult. All, of course, modulo the bank's success in making it expense enough to get their way without a decisive legal position.

Plus it wouldn't be fair to the 1300 bank customers who don't know how crappy their bank really is - and how insecure their personal information is.

Err.. Offtopic: I can't see how many points the parent comment has. That's weird. I see the uparrow, followed by "by mikeyur 8 hours ago", but the "N points" part is missing.