It didn't all have to be removed, but it should at least have been sanitized. Summary:

A retired minister's personal info was on a church account where there are proceeds processed by Intuit's payment settlement services. This resulted in a 1099-K in his name (using old contact info). We don't know if that was his responsibility on behalf of the church, or used to be, but the correspondence from the IRS regarding tax year 2021 was a big surprise and a PITA to deal with so far.

It's safe to assume someone somewhere has been getting this money and this info. The problem has developed over time, somewhere at least one ball got dropped, and someone should have followed up with someone else, as usual.