I asked if my data was compromised, they said no, but how can I trust/verify this?
This was a targeted attack towards specific individuals, probably carried out by a state actor or someone after data of very valuable individuals. Unless you're one of those (oligarch, etc), you're probably fine.
You can't, really. Banking legislation does not require them to tell you.