The more usual issue is businesses getting their machines used for banking hacked and the hacker sniffing all their credentials and emptying their accounts. Many banks don't support two-factor authentication for business accounts because they don't have to - it's not their money on the line.