CFPB Clears Hardware From Vacated Offices After Watchdog Security Warning
By PYMNTS
AI summary of the source article
An Office of Inspector General audit found that the Consumer Financial Protection Bureau left hardware at former regional offices vacated in early 2025 without verifying whether the assets were properly secured. Because the CFPB maintains sensitive financial and supervisory records, the OIG warned of potential security risks and urged immediate action. CFPB Chief Information Officer Christopher Chilbert concurred with the recommendation and stated the agency had begun removing the equipment. While Chilbert maintained that centralized data centers and cloud services prevented sensitive data from residing on the hardware, the agency committed to completing office decommissioning by Sept. 30.
Why it matters
The CFPB maintains databases containing consumer complaints, financial details, and confidential supervisory records on financial institutions, prompting watchdog concerns over potential hardware data security risks.
Key facts
- The OIG found the CFPB vacated regional offices in early 2025 without verifying whether left-behind hardware was properly secured.
- CFPB CIO Christopher Chilbert stated regional hardware does not contain sensitive databases due to centralized data centers and cloud providers.
- The CFPB planned to complete decommissioning of the vacated regional offices by Sept. 30.