credit union privacy

what confidentiality responsibility does a financial institution have if a check deposited to an account was 1) posted incorrectly to another account, and 2) the check was returned by the payor's institution for insufficient funds and (due to the posting error) was returned, along with notification of the return, to the person who's account it was incorrectly deposited to. It had names, addresses and account numbers of both the payor and the recipient. The back of the check had the correct account information and the front of the check had the correct spelling of the name of the intended recipient.

The financial instution was made aware of the deposit error, and knew the check had been returned - therefore knowing they must have sent the information to the wrong person. Nothing has been done by the institution to recover the information.