Did a US official let slip new information about online theft from banks?