***** & Security

My wife's phone was ****** on Saturday and we remotely deleted the phone but some how the ******* managed to get into the banking app. They have now changed my login Name, Password etc. and when we went to the FNB Branch we were told that if the ******* steel anything from the account it would be our problem and not FNB's. Here is the question: How did they get into my account in the first place if they need my password to access the app? Then the app isn't safe!