Fed Employee Removed Sensitive Files Before Retirement, Oversight Shortcomings Exposed

A recent report from the Office of Inspector General at the Federal Reserve found that an employee removed potentially sensitive files related to the Federal Open Market Committee (FOMC) before their retirement in July 2024. The FOMC is responsible for setting U.S. monetary policy, and its members unanimously decided to raise interest rates for the first time since 2023.

The employee worked in the division of international finance (IF) at the Fed and triggered 279 data loss prevention (DLP) alerts. Of these, 111 were flagged as potentially involving sensitive FOMC classified information. The alerts included activities such as printing, copying data to a notepad application, sending sensitive information via email to personal addresses, and transferring files to an unencrypted USB device.

The OIG report highlighted numerous oversight shortcomings with the Fed's offboarding process controls for records management. The central bank vowed to address these issues in a formal response to the internal watchdog group. The inspector general's office provided nine recommendations to safeguard sensitive information during employee offboarding, which were agreed upon by Federal Reserve Board management.