Kiwibank is investigating how it sent 4200 customers an email or online bank statement with their own account number, name and address, but another person’s transaction history.
The commissioner, John Edwards, said some people will be identifiable by the statements and information sent.
Read more on RNZ.