As a former employee of Countrywide I can say with certainty that the chain of command in the information security department was incompetent and truly did not understand the security risks identified to them. Report after report was submitted on this very issue and was met with resistance to mitigate and investigate the identified issues. Reports of neglect to investigate the issue were then submitted to the ethics department who then did nothing about it as well. I do hope the FBI contacts me to discuss Countrywides neglect to ensure customer data was properly protected. Storing SSN's as well as other PII data unencrypted is neglegent. The company should be held accountable for not properly securing customer data and neglect to investigate over a year ago when this potential breach was brought to their attention. It is time companies are held liable for their neglgence.

I too, as a former employee, can vouch for the fact that the CISO and other executive management knew that security compensating controls were not in place to prevent such activities. These issues where brought to the attention of security management and the ethics department by my co-worker and I went to HR with my concerns when nothing was done. I hope the FBI contacts me as well. Management was told that this would happen.

I have learned that the KamberEdelson Law Firm (http://www.kamberedelson.com) is investigating allegations relating to the compromise of millions of account records at Countrywide. If anyone would like to assist because they have additional info or believe they may have been impacted they should contact countrywide@KamberEdelson.com

Thank you.

Sign me up for the law suit. This company is going to be held accountable for the actions of their employees. I am tired of being taken advantage of by big companies . How dare them offer 2 years of credit monitoring? Like that is really going to help.

An earlier comment refers to our firm’s involvement in the Countrywide privacy class action litigation and encourages interested consumers to contact us. The comment could be viewed as a promotional message, which would be against our policy and, probably, the policies of this site. While the poster appears to have been well meaning, the decision to engage legal counsel is a serious one that we believe should not be made based on anonymous comments.