Australia’s Commonwealth Bank has admitted losing the bank records of almost 20 million people.
Names, addresses, account numbers and statements were stored on two magnetic tapes which were meant to be destroyed by a subcontractor in 2016.
But despite not receiving evidence the tapes had actually been destroyed, the bank did not tell customers there was a potential problem.
The breach is the latest scandal involving Australia’s largest lender.
In a filing to the Australian Stock Exchange, the bank said it could not confirm that the tapes containing 15 years of data had been destroyed securely.
But it said “an independent forensic investigation” by accounting firm KPMG had “determined the most likely scenario was the tapes had been disposed of.”
It added “the tapes did not contain passwords, PINs or other data which could be used to enable account fraud”.
And it stressed there had been no evidence that customer information had been compromised, with monitoring mechanisms remaining in place.
Buzzfeed first reported news of the lost tapes, claiming they were supposed to be destroyed by Fuji Xerox after the decommissioning of a data centre.
