Comment from Anonymous
Anonymous AnonymousOpposeIndividual
Summary: The commenter argues that aggregating sensitive personal and administrative data into a single system creates a high-value target for cyberattacks. They oppose the proposed action because it increases systemic cybersecurity risks without a clear statutory need.
From a practical security standpoint, aggregating vast amounts of sensitive administrative, occupational, and personal data into a single, modified system creates an incredibly high-value target for bad actors. The federal government has a troubled history with personnel data breaches (such as the historic OPM breach). Expanding the depth of records maintained within CFPB.009 without presenting an explicitly narrow, unfulfilled statutory need is a bad policy that increases systemic cybersecurity risks.