A Consumer Financial Protection Bureau employee sent personally identifiable information linked to at least 256,000 consumers to a personal email account in a breach of the agency’s data protections.
The employee, who no longer works for the agency, had authorized access to the information. There’s no indication consumer data traveled beyond the former employee’s personal account, but the staffer has not complied with the agency’s demand for proof the emails have been deleted, the CFPB said.
The breach prompted Republicans on House and Senate financial oversight committees to write the agency asking for more details. The CFPB alerted Congress to the problem in March.
