So a theoretical maximum of 600 users out of 500,000 would switch banks due to a security issue?
Yep, that's going to drive a lot of security spending. Not.
The actual numerical difference is almost certainly much smaller since some number would have switched anyway for various reasons (moving, death, promotions from other banks, bad customer service/experiences etc).