Oh dear. Remember those ‘methods’ PokeBank was supposedly using to detect hacked Pokemon and stop them being transferred to Pokemon X and Y?
Well it seems like they’re not very good. As in, blatantly modified/hacked Pokemon are being let straight past the security ‘systems’ and transferred into the system, ready to be withdrawn into Pokemon X and Y very shortly.
Like this Infernape. It’s apparently an Italian Iron Fist one, which is completely impossible to get legitimately since the event was only run in English countries, and it was caught in the wrong type of Pokeball (a Premier Ball instead of a Dream Ball). So yeah, their system needs work, since stuff that’s actually impossible to get legitimately can somehow sneak in and get into the generation 6 games.