This is how your financial data can get stolen