A bank in India has sent me a bank statement email (meant to be sent to their customer).
Ignore that they sent potentially sensitive information to a stranger.
The statement pdf is password protected.
And the email says the password is first 4 letters of his name and last 4 digits of the account number.
Both the name and account number are given in the email.
Q. So what did the password achieve?
A. Bank grade security!