A friend of mine's surname is the same as a large US private bank. He bought the .com address for his own company years before the bank got online and so regula

A friend of mine's surname is the same as a large US private bank. He bought the .com address for his own company years before the bank got online and so regularly receives emails from the bank's customers containing sensitive information, including financial data, account numbers, SSNs and more. He's told the bank many times that their customers are sending stuff that really shouldn't be in an email to the wrong address, offered to set up redirects or even sell them the domain, but do they care? Not one bit.