Consumer complaint received 2025-08-12 00:00:00
Product: Mortgage — FHA mortgage
Issue: Trouble during payment process — Paying off the loan
Company: Rhode Island Housing and Mortgage Finance Corporation
State: RI

Complaint narrative:
On XX/XX/year>, RI Housings Assistant Director of Loan Servicing accidentally emailed me another borrowers private mortgage account data payoff figures, loan balance, and other nonpublic details in clear violation of federal privacy laws. This breach had nothing to do with my own account and points to systemic failures in privacy safeguards and staff training. A senior manager admitted the error but offered no evidence of corrective action or regulatory reporting. If this happened once, it may have happened before and without an investigation, it will happen again. 

Unauthorized Disclosure of Private Mortgage Information by Rhode Island Housing Summary of Incident : On XX/XX/year>, XXXX XXXX, Assistant Director of Loan Servicing at Rhode Island Housing ( RI Housing ), sent me an email in which I was inadvertently CCd on a message containing private mortgage account information for another RI Housing borrower. This included personally identifiable loan details, payoff figures, and other account-specific financial data that I had no right to access. 

On XX/XX/year>, XXXX XXXX of RI Housing acknowledged the incident in writing, attributing it to an autofill error. She stated that the affected borrower had been notified, that the incident was documented, and that staff procedures would be reviewed. 

Regulatory Concerns : This incident constitutes an unauthorized disclosure of nonpublic personal information in violation of the GrammLeachBliley Act ( GLBA ) and Regulation P ( 12 CFR Part 1016 ), and potentially other federal and state privacy laws. 

The disclosure was not the result of a technical system failure, but of human error and inadequate controls, indicating a weakness in RI Housings compliance culture. 

This event is separate from my own mortgage account and unrelated to any ongoing dispute I may have with RI Housing it represents a broader compliance and consumer protection failure affecting another borrower. 

This incident may be part of a pattern of misconduct at RI Housing, suggesting systemic deficiencies in privacy safeguards, staff training, and supervisory oversight. 

Requested Action : I request that the CFPB investigate RI Housings privacy controls, incident response, and regulatory reporting procedures, including : Whether this breach was reported to the appropriate regulators. 

Whether RI Housing implemented corrective measures and training to prevent recurrence. 

Whether RI Housing has had similar incidents in recent years, and if so, how those were handled. 

Whether additional supervisory or enforcement action is warranted to ensure compliance with federal privacy requirements. 

Supporting Evidence ( to be attached ) : - Original email from XXXX XXXX with private borrower account data included. 

- Written acknowledgment of breach from XXXX XXXX dated XX/XX/year>. 

- My written reply preserving the incident for litigation and regulatory purposes.

Company response to consumer: Closed with explanation