The bad news for the staff of the crisis-ridden bank continues unabated. A former IT employee copied sensitive data about colleagues over years.

On Monday, Credit Suisse informed part of its workforce a former IT employee had copied and taken some of their personal data, including compensation details, as reported by «Efinancialcareers» and «Bloomberg» (behind paywall).

According to the report, the leak was discovered as far back as March 2021. Information is only now being provided because the perpetrator had to be identified first which required court proceedings, according to reports.

Violating Internal Bank Policies

The employee who had authorized access to the data at the time, transferred the information to a personal device, violating internal bank policies.

Some of the stolen data reportedly included information about salaries and variable compensation between 2013 and 2015, as well as details about bank accounts used for salary payments. The stolen data varies by employee.

Legal Remedies

So far, Credit Suisse found no evidence the data was shared or used maliciously.  «Having investigated it thoroughly, we have taken and are continuing to take steps, including legal remedies, to adequately contain the incident,» according to Bloomberg which cited an emailed statement from a spokesperson Monday.

«To date, there is no evidence of any onward transmission or intent to use the data in any way,» Credit Suisse said in the statement.