"CFPB Employee Sends 256,000 Consumers' Data to Personal Email"

An employee from the US Consumer Financial Protection Bureau (CFPB) has reportedly forwarded confidential records of roughly 256,000 consumers and confidential supervisory information of approximately 50 institutions to a personal email account.  Supposedly the investigation is ongoing, and the agency no longer employs the employee.  Apparently, the employee certified they deleted each email before being fired.  According to Darren James, senior product manager at Specops, it is unclear whether the CFPB has done any subsequent threat intelligence analysis to see if this data has appeared elsewhere.  James noted that the CFPB has a lesson to learn here in responsible data handling.  Paul Bischoff, a privacy advocate with Comparitech, echoed James’s point, calling it “embarrassingly ironic” that the CFPB endangered consumers’ information.

Infosecurity reports: "CFPB Employee Sends 256,000 Consumers' Data to Personal Email"