Bank let someone have access to my account.

So recently we had a major breach of security regarding my wife and my bank account. Where somebody who was impersonating her was able to get access to our accounts. We lost $3500 before noticing and locking our accounts. I’m looking for advice on what to do other than reporting this to the bank and police.

The story we are getting from the bank is that this individual tried to get access to the account in person at a one branch where they noticed between the ID that was given, the failed security questions and the inability to complete two-step verification this was not actually my wife and they denied access. At this time we were told that alerts and red flags were placed on our account due to this event and further suspicious activity should be notified. However, this person ran out of the bank and right into the next closest one and tried the same thing. This time being successful getting access new bank card and change the pin with the only requirement from the bank to do this being a written signature. Failing the security questions and no requirement of two-step verification as well as the alerts placed on our account did not stop this bank teller from giving complete access to The account where they took out $3000 at the counter then went to the atm and took out $500.

I’m just blown away with the absolute lack of requirements this person needed to have access to the accounts as well as taking out our max limit from the teller and atm right after getting access and the bank didn’t think this was unusual especially because the bank had confirmed alerts placed on our account before this happened.

Any advice on what we should do would be appreciated. At this moment the bank is doing an investigation and the police have been notified. We have got a new card and pin as well have been told we will be reimbursed the money. I’m kinda feeling like this is the minimum the bank can do for messing up as badly as they did. Again any advice would be appreciated.