On February 7, the union representing CFPB employees published a notice expressing concerns regarding the recent addition of certain DOGE employees to the CFPB’s email directory and their presence in offices. The union expressed concerns about the potential exposure and misuse of sensitive data collected by the CFPB, which included information about individuals, businesses, banks and other financial institutions. In its notice, the union argued this data could be compromised, despite existing data security protocols and cybersecurity training.

The union stated it is particularly concerned about the potential exploitation of proprietary information from big tech payment platforms and the implications for banks and other institutions under CFPB supervision. The notice further stated that the union plans to explore all avenues, including legal measures, to protect both employee and consumer data, and that it is calling on consumer advocates, industry stakeholders, lawmakers and citizens to assist in addressing these issues.

Additionally, a group of senators penned a letter to raise similar security concerns about DOGE’s access to data from several agencies, including the CFPB. In particular, the senators referenced reporting that “DOGE officials have transferred data to commercial servers that may not have been vetted for compliance with security and privacy requirements.”