Yes banks tend to be considered CNI (critical national infrastructure)

the The Computer Fraud and Abuse Act (as amended 1994 and 1996) seem to indicate that financial institutions are protected computers

"intentionally accesses a computer without authorization or exceeds authorized access" which this guy did.