That response makes no sense. The only proper response would be to revoke ALL access to the bank's website until such time as the security hole can be confirmed fixed. Otherwise, the implied message is that you should NEVER tell the bank that they have a potential problem.
I just wonder whether this was actually a story of extreme incompetence or extreme corruption.
The critical situation of the Sanders campaign not being allowed access to its own data by the DNC may have been now resolved (under the prospect of the DNC having to go before a federal judge and justify its actions), but I think there may be much more story here that has yet to come out.
And it may not be one that looks good for the DNC, Debbie Wasserman-Schultz, or the Clinton campaign.