Holly crap ! Mine is BMO too !
You know what's funny ? BMO used to have a security question which you had to answer before you entered your PIN to access the account . Now they got rid of that, so its easier to hack.
Now on www.bmo.com , you just enter your 16 digit Debit card number ( not hard to get from somewhere ) and then your 6 digit numeric PIN ( Its not even an alphanumeric PIN, they don't allow that ) , so only a 6 digit numbers PIN, that's it and your are in !
First after you entered the 16 digit debit card number, they would ask the answer to a security question and then the 6 digit PIN. But they got rid of the security question for some reason !
You could have any 3 security questions you wanted like - Who is your favourite athelete ? What was your first pets name ? Where did you meet your spouse ? etc etc.
I don't know why banks don't allow alphanumeric passwords and PINS like email does say something like *@1AY!
Just a numeric PIN is silly like 597436 or something like that.
16 digit debit number ( easy to get of the debit card ) and 6 digit numeric PIN and anyone is into your BMO account online ! No security questions, no alphanumeric PIN, no 2 STEP authentication , nothing ! No wonder someone hacked your BMO account.