A bank that not only refuses to allow customers to have passwords deemed unacceptable but, more worryingly, allows it's employees to view customer passwords and change them seemingly at a whim. Read about it on the BBC website here.
"Lloyds TSB stressed there was no security lapse in this case"
So, an unauthorised alteration to a customer password is not a security lapse?