US bank discloses security lapse after sharing customer data with AI app