Insider data theft costs Bank of America $10 million