The spreadsheet shared by Elez had names, transaction types, and amounts of money.
Although the Treasury didn't reveal how many payments the spreadsheet contained, David Ambrose, chief privacy officer for the Bureau of Fiscal Service said, "The names in the spreadsheet are considered low-risk PII because the names are not accompanied by more specific identifiers."
However, he admitted that sharing PII without encryption and prior written approval violated Bureau policies.