A broker notified the CBP Security Operations Center of a records breach on Monday, March 9, 2026. Its forensic team later identifies more compromised importer numbers. What must it send, and when?
Under 19 CFR 111.21(b), within ten business days of the notification the broker must electronically provide an updated list of any additional known compromised importer identification numbers, and any further information discovered later must be sent within 72 hours of its discovery. The regulation sets no 30-day report and does not itself require notice to clients. Source: 19 CFR 111.21(b) (eCFR, as at 7 Oct 2026).
Waiting for CBP to ask before sending the updated list.
Practice more CBLE Broker Duties, Supervision, Records & Penalties questions
Exam-style questions with worked answers, then full timed mocks. Free to start.
Build a daily practice habit — a few exam-style questions a day, with worked answers. Free to start.
Start practicing →Original study material mapped to the public CBP exam categories; not a real test question.Independent. Not affiliated with or endorsed by U.S. Customs and Border Protection (CBP). Verify figures and rules against current guidance before relying on them.