You should have also reported them to the Office of the Comptroller of the Currency, a little known regulatory office that no one ever seems to know about, but govern such cases like yours.