You are most likely right. I think the employee was giving his best guess, but what concerned me is that they were telling me under which IP address the hack was attempted and that it was showing up under the Telus network. The bank was not aware of which phone provider I had. I think I'll just switched the SIM to be sure, also getting a new bank card today. Thanks to everyone for the solution offers, hoping its a one off.