The bank in your example is beyond negligent, as it provided the opportunistic thief the opportunity to abscond with customers' money the bank exists to protect.

In this case, the bank is the parents of children who are obligated to supervise their behavior online, not the children themselves.