The CFBP announced Thursday that it fined U.S. Bank $37.5 million, after a five-year investigation.

The fifth-largest commercial bank in the US was fined by the Consumer Financial Protection Bureau for illegally accessing consumer credit reports and opening accounts without their permission.

U.S. Bank, which is based in Minneapolis and has over $559 billion in assets, pressured its employees to meet sales goals as part of their job requirements, offering them incentives for selling bank products, the regulator said. In order to meet those goals, the bank’s employees illegally accessed customer credit reports and personal data to open accounts without permission, the investigation found.