I found this interesting.  Is this not the issue Dodd/Frank is trying to address in making financial institutions responsible for their 3rd party vendors?  It seems if or when it gets tested in the courts, there will be precedent in this case.

Being responsible for your independent contractor’s fraud – Lexology.