"Second, every bank does something like this"

I can't tell if your implying that this makes the practice somehow less bad, but I hope not.

"I should also point that knowing someones Tel Number, Account Number and/or CC number is a considerable amount of info to have."

It's a considerable amount of information for a random stranger to have, but _not_ for an attacker.