Manulife Bank didn't protect customers' highly private information, insider reveals