I've just heard that any bank employee can access your full account, including activities, transfers, credit scoring etc just by entering first and surname into their system (providing you bank with them). I thought employees needed at least 2 (or more?) pieces of information before they can open your account details, unless they open by sort-code and account number.