Regions Financial Corporation reported a data security breach involving the loss of a USB flash drive containing personal information of individuals enrolled in its 401(k) plan. The incident involved Ernst & Young LLP, Regions' audit firm, which mailed a drive containing names, Social Security numbers, and dates of birth to another office. The drive was lost in transit, though the device was encrypted (with the password included in the package). Regions offered one year of free credit monitoring to affected individuals.