A bank did something similar in this country some years ago. A customer changed his password to something along the lines of ‘Barclays sucks’. Then a bank employee, without his knowledge, changed it to something more complementary to the bank.
A comedian, Lucy Porter, used to do a brilliant routine about phone banking security questions. She proposed that the question they have to ask her should be ‘[I]where do you think you’re going dressed like that[/I]?’.
And her password in response ‘[I]you can’t tell me what to do, you’re not my real father[/I]’.