At my job we have had a similar experience. The company has an account with a major bank where we receive ACH transactions. We can log in to their website and submit a return for any transactions incorrectly transmitted to us. When there is a return processed for a person that has an apostrophe in their name, the website returns an error. We were originally concerned about a SQL injection problem (Little Bobby Tables). However, when we log back in, we find that the return is successfully processed. We have notified them of this error, but no change has been made.