字号 ·· | 护眼
thenextweb

监管机构发现,CFPB无法说明废弃办公设备上的数据是否安全CFPB can’t say if data on abandoned office kit is safe, watchdog finds

点「原文对照」整页切到原文,或双击某段只看那段的原文。

该局于2025年初终止了其在纽约、芝加哥、旧金山和亚特兰大办公室的租赁合同。它留下了技术设备,且至今仍无法确认这些设备或其中的任何数据是否安全。

The bureau ended the leases on its New York, Chicago, San Francisco and Atlanta offices in early 2025. It left technology behind, and still cannot confirm that the kit, or any data on it, is secure.

美联储理事会和消费者金融保护局(CFPB)的监察长于周三发布了一份紧急管理警报,提出了这一警告。该问题是在年度网络安全审计中发现的。

The inspector general for the Federal Reserve Board and the CFPB issued the warning as an urgent management alert on Wednesday. It found the problem during its yearly cybersecurity audit.

报告称,消费者金融保护局“无法知晓”是否有人访问、篡改或拿走了这些硬件设备或其中的任何敏感数据。

The CFPB has “no way of knowing” whether anyone accessed, changed or took the hardware or any sensitive data on it, the report said.

监察机构警告称,这些设备可能存有消费者投诉、敏感财务详情和机密监管记录。

The kit could hold consumer complaints, sensitive financial details and confidential supervisory records, the watchdog warned.

一年半的拖延 消费者金融保护局从美国总务管理局(GSA)租用这些办公室,租赁于2025年2月结束后,实体安全由总务管理局接管。该局于同年9月停止支付办公室的网络连接费用。

A year and a half of drift The CFPB rented the offices from the General Services Administration, which took over their physical security when the leases ended in February 2025. The bureau stopped paying for the offices’ network links that September.

到2026年3月,该局仍未完全搬离。6月,官员告知审计人员无人检查过这些设备。9月,他们表示仍无批准的计划或时间表,理由是诉讼和差旅审批问题。

By March 2026, it still had not fully moved out. In June, officials told auditors no one had checked the equipment. In September, they said there was still no approved plan or timeline, citing litigation and travel approvals.

该局反驳 消费者金融保护局同意查找并保护所有设备。但在一份日期为9月18日的信函中,它拒绝承认面临更高的数据泄露风险。

The bureau pushes back The CFPB agreed to find and secure all the equipment. But it rejected the idea that it faces a higher risk of a data breach, in a letter dated 18 September.

首席信息官Christopher Chilbert写道:“区域办公室不存放包含敏感数据的数据库。”

“No databases containing sensitive data are housed in the regional offices,” wrote chief information officer Christopher Chilbert.

他表示,这些设备主要用于网络、互联网接入和行政工作。该局已开始逐个清理各前办公室的IT设备,目标是在9月30日前完成。

He said the kit was mainly used for networks, internet access and admin work. The bureau has started clearing out the IT at each former office, one site at a time, and aimed to finish by 30 September.

机构被大幅削减 办公室关闭由当时负责运营该局的Russell Vought下令。2025年2月,唐纳德·特朗普重返白宫后不久,员工被告知停止工作并居家待命。

An agency cut to the bone The office closures were ordered by Russell Vought, who was running the bureau at the time. Staff were told to stop work and stay home in February 2025, soon after Donald Trump returned to office.

自那时起,消费者金融保护局(CFPB)已缩减对银行和贷款机构的监管,并撤销了价值数亿美元的执法案件。彭博社报道称,政府计划裁减其剩余1100名员工中的一半。

Since then, the CFPB has scaled back its oversight of banks and lenders and dropped enforcement cases worth hundreds of millions of dollars. The administration plans to cut half of its remaining 1,100 staff, Bloomberg reported.

各州试图填补这一空白。7月,46个州就Cash App欺诈指控与Block达成和解,这类案件曾由该局主导。

States have tried to fill the gap. In July, 46 states settled with Block over Cash App fraud claims, a type of case the bureau once led.