It becomes a question of negligence / due diligence. If a bank has zero physical security measures and leaves the money out in the open, that is negligent. Bu

It becomes a question of negligence / due diligence. If a bank has zero physical security measures and leaves the money out in the open, that is negligent. But, even if a bank has all the state of the art, "best practices" physical security measures, they can still be robbed. No bank is going to stop a nation-state army attacking them, for example. I think the same is true of cyber security. Nothing will ever be 100% secure. The question is whether the company has followed reasonable best practices and due diligence. Everything else is up to the government to maintain law and order. > companies that cannot keep data safe shouldn't be storing my data in the first place. If you're expecting absolute safety, either physically or electronically, there is nowhere in the universe you could deposit your money. Otherwise, the FDIC already has regulations in place to make sure banks are reasonably secure.