I needed to submit a form to my HSA administrator (hsabank.com). The form has my social security number on it. The offered ways to submit it are email (insecure), fax (obsolete and inconvenient), and U.S. Mail (slow and inconvenient).
I'm no longer surprised to encounter financial institutions that do this; I'm just sad.
There are many secure file upload products. Please, I'm begging you, deploy one of them if your company needs people to upload #PII.
#infosec #privacy #fintech #HSABank