The policy of not naming the entities involved here, when it comes to data breaches, is not going to work long term.
I know they don't like it, and probably won't handle it rationally, but it will all come unstuck if a bigger player's database is compromised at some point... and the clock is ticking.
But I'm sure those major banks still using pirate copies of XP for their atm's are safe and secure.
* in fairness to them, the ones I've seen in Bangkok all had XP Service Pack 2 applied... so we're golden.