The article mentions that the bank had gotten requests to register two new computers for the company that was sent from the company's internal email. This makes me think that their bank credentials weren't the only thing compromised. This in turn suggests that the company's security practices could be improved.