An employee of the Consumer Financial Protection Bureau (CFPB) made unauthorized transfers of confidential data relating to 256,000 consumers to a personal email account, the bureau has revealed.
The CFPB found personally identifiable information relating to customers of seven institutions that had been forwarded by a staffer—who is no longer employed at the CFPB. The same staffer also accessed information that included names and transaction-specific account numbers related to about 256,000 consumer accounts at one institution.
The CFPB informed the House Committee on Financial Services about the breach in March, informing lawmakers that the breached data contained personally identifiable information (PII) as well as confidential supervisory information (CSI)….