Fed watchdog: departing staffer set off 279 data alerts, many flagged as FOMC files, and nobody can say what left

The Federal Reserve Board's inspector general has issued an early warning about how the Fed handles staff who leave, built around one case: a retiring employee in the Division of International Finance who, in the months before leaving in July 2024, triggered 279 data-loss alerts, 111 of them on files the Fed's software flagged as potential Federal Open Market Committee material. The management alert is dated Sept. 24. Bloomberg's headline on Monday described it as a "classified file breach."

What the report says happened

From the 34-page memo:

• Between March and June 2024 the employee set off 279 alerts by printing, copying text, emailing files to several personal addresses and copying files to an unencrypted USB drive. The software labeled 66 of them as potential FOMC Class I information, the most sensitive tier, and 45 as FOMC Class II.
• Of the 227 alerts in June, 93% came on or after June 16. The employee traveled to a country the Board rates as "restricted" within two days of the biggest batch of transfers, and retired on July 2.
• The same person had copied "hundreds of FOMC classified files" to an unencrypted USB drive in 2021, and tried to email FOMC material to a personal account in 2023. That email was blocked automatically.
• When the former employee handed back a USB drive in August 2024, it contained none of the files that had triggered the alerts. The division reviewing it did not notice, never recovered the emailed or printed material, and stopped following up after September 2024.
• The case was not escalated to the Fed's legal division or the inspector general as the rules require. The inspector general's auditors found it themselves in July 2025.

What the "breach" headline gets wrong

Three things in the report cut against the idea of a confirmed leak of policy secrets.

"Classified" is the Fed's own label. The report says the information it describes is categorized under the Board's internal system "and is unclassified for national security purposes." The employee did not hold a security clearance.

Nobody knows what was taken. The inspector general's investigators reviewed the case and "determined that there was not a sufficient basis to pursue this incident as a misconduct investigation," partly because records did not show clearly what was removed and because they confirmed that many of the alerts were false positives. The alerts count file labels; they do not prove that sensitive content left the building.

This is about controls. The memo's findings are that no one owned the response: the records office, IT security, the FOMC secretariat and the employee's division each assumed someone else was handling it, and the case stayed open for more than a year. The inspector general made nine recommendations. The Board agreed with them and plans to fix escalation roles by the first quarter of 2027 and roll out new data-loss software by the third quarter of 2027.

Why traders should care anyway

The FOMC's confidentiality rules exist so that nobody gets the rate decision, or the staff analysis behind it, before the market does. Nothing in this report shows that happened, and the files involved date from before mid-2024. But the memo says plainly that the weaknesses, if left alone, raise "the risk of a major information security breach." Separately, the report notes an earlier recommendation that staff with access to FOMC information report personal foreign travel.

The timing is awkward for the Fed. It is trying to hold credibility with a bond market that has pushed the 10-year Treasury yield above 5.2% and is pricing in the chance of another hike. For the rate backdrop, see the bond market pricing another hike and our Fed and rates coverage.

Sources: Office of Inspector General, Board of Governors of the Federal Reserve System and CFPB (full report); Bloomberg. This is market information, not investment advice.