CFPB can’t say if data on abandoned office kit is safe, watchdog finds

The CFPB’s 2025 office closures left a portable “kit” containing consumer complaint data, financial details, and supervisory records in an unsecured state. An audit revealed the bureau cannot confirm whether the kit was accessed, altered, or removed, and no plan or timeline exists to secure or relocate the equipment. The agency maintains that no sensitive databases remain in the former regional offices, but it has not completed the removal of all IT assets.