The Consumer Financial Protection Bureau said it has not yet notified 256,000 consumers, nearly two months after data was potentially compromised by a bank examiner with access to supervisory information and large-scale data collections.

The CFPB said it is still working with financial institutions to notify consumers about the Feb. 14 breach in which a now-former bank examiner sent supervisory information on 45 institutions, and personal identifiable information on 256,000 consumers at seven institutions to his personal email account.

[Remind me again what the CFPB’s mission is. Isn’t it to protect consumers? If that’s the case, why hasn’t the CFPB notified customers in the ten weeks following the breach so that they can take steps to protect themselves? — Ed]