Any officer or employee of a consumer reporting agency who knowingly and willfully provides information concerning an individual from the agency's files to a person not authorized to receive that information shall be punished by a fine of not more than five thousand dollars or by imprisonment for not more than one year, or both.
Mass. Gen. Laws ch. 93, § 67