Local? Just local? I'd be as noisy about it as I could, and I would have informed the people who's info had been compromised as to just what the bank said when you offered them a list of compromised accounts.

Wouldn't you want to be informed if your bank was intentionally leaving your personal info and financial well-being at risk?