According to Goldman, the outside contractor had been testing changes to the bank’s internal processes in connection with reporting requirements set forth by the Financial Industry Regulatory Authority.
Goldman said the contractor meant to email her report, which contained the client data, to a “gs.com” account, but instead sent it to a similarly named, unrelated “gmail.com” account.
The bank said it has been unable to retrieve the report or get a response from the Gmail account owner. It said a member of Google’s “incident response team” reported on June 26 that the email cannot be deleted without a court order.
“Emergency relief is necessary to avoid the risk of inflicting a needless and massive privacy violation upon Goldman Sachs’ clients, and to avoid the risk of unnecessary reputational damage to Goldman Sachs,” the bank said.
Testing with production data… so Goldman Sachs employs idiots.
Risk of reputational damage… so Goldman Sachs employs crooks.
I think the damage is already done, although I wouldn’t mind having the report show up on wikileaks.