My Halifax account was compromised a few years back and a couple of unauthorised withdrawals were made before I spotted what was going on. I think it was about
THIS TIME.
Companies should know better than to store unencrypted passwords! If you want to see if a company that you do business with does that, use their 'forgotten password' link. If they email you your password then their system is NOT secure because they are clearly storing it in an unencrypted state. Contact them and make your feelings known about that!