On: Two Canadian banks say accounts compromised: CIBC ...

[UnFleshedOne]

The point was that the system knew his too-long password and the password was correct, just being suddenly rejected on the frontend, unlike what support said.