According to a California regulatory filing, the leak happened on April 22 during a test submission to the U.S. Small Business Administration.
BofA, which has processed more than 305,000 PPP loans exceeding $25 billion, said the potential breach affected a “small number” of its business customers.