CFPB Report: 2026-IT-C-015 September 30, 2026
The CFPB maintains data that, if exposed, could reveal consumers’ and businesses’ private information, undermine public trust, and compromise enforcement of consumer financial laws.
During an ongoing audit, we discovered that the CFPB left hardware assets at former regional offices it vacated in March 2026. The CFPB has not verified whether those assets are properly secured.
Due to the urgency of this issue, our management alert includes a recommendation for the CFPB to secure the hardware assets, which the agency has agreed to do.
