Lawrence and Georgene Kruser had a joint checking account with Bank of America. The bank had issued each of them ATM cards. The Kruser's thought Lawrence's card has been destroyed in September, but their December bank statement showed an unauthorized withdrawal of $20 by someone using Lawrence's card. The next year, the Krusers discovered in September that the July and August bank statements showed 47 unauthorized withdrawals totaling $9,020. When the bank refused to reimburse them the Krusers sued. Does the bank have to reimburse them the $9,020?