ALEXANDRIA, Va.—In the wake of the loss by an NCUA examiner of a flash drive that contained member data, the agency’s inspector general, James Hagen, said NCUA will be taking a number of steps.
The flash drive contained personally identifiable information of members of the Palm Springs FCU. Among the actions being taken by NCUA beginning in January:
- An audit will be done to determine whether NCUA has adequate controls in place to protect electronic personally identifiable information and sensitive credit union data during examinations.
- A review will be conducted regarding the agency’s decision not to publicly announce on the NCUA website the data breach and how the agency can improve if a breach were to occur in the future.
- An investigation will be conducted into the unauthorized disclosure by two alleged “NCUA sources” of internally held information regarding the breach of the credit union members' information.
Hagen said the review will “proceed in a thorough and deliberative manner in all these activities, and there is no set deadline for their completion.”
Related Story: