Call the bank's regional HQs. Ask to speak with the manager of security. Report the instance. Ask for his/her name and number. Tell the individual you plan to go public with the information in 48 hours if there's no resolution.
The individual will feel a career risk and act accordingly.
The individual will feel a career risk and act accordingly.