The bad news for the staff of the crisis-ridden bank continues unabated. A former IT employee copied sensitive data about colleagues over years.
On Monday, Credit Suisse informed part of its workforce a former IT employee had copied and taken some of their personal data, including compensation details, as reported by «Efinancialcareers» and «Bloomberg» (behind paywall).
According to the report, the leak was discovered as far back as March 2021. Information is only now being provided because the perpetrator had to be identified first which required court proceedings, according to reports.
Violating Internal Bank Policies
The employee who had authorized access to the data at the time, transferred the information to a personal device, violating internal bank policies.
Some of the stolen data reportedly included information about salaries and variable compensation between 2013 and 2015, as well as details about bank accounts used for salary payments. The stolen data varies by employee.
Legal Remedies
So far, Credit Suisse found no evidence the data was shared or used maliciously.
The confirmed the statement to finews.com that «Credit Suisse has recently addressed a data security incident that involved information relating to a number of Credit Suisse personnel. This data was moved some years ago by a former employee, with legitimate systems access, to their personal device, in breach of Credit Suisse policies and procedures.»
It went on to say «having investigated it thoroughly, we have taken and are continuing to take steps, including legal remedies – to adequately contain the incident. To date, there is no evidence of any onward transmission or intent to use the data in any way.»
