Red faces as government laptop goes missing

High value data stolen

Written by Iain Thomson

A laptop containing details of customers at banking institutions has been stolen after a member of HM Revenue and Customs (HMRC) left it in the boot of his car.

The computer contained records from finance houses revealing the identity of high value customers who had invested in Individual Savings Accounts, according to research by the BBC.

“We very much regret the loss of some customer data provided to us by a number of financial institutions," said a spokeswoman for HMRC.

"The incident has been reported to the police and we are carrying out an urgent internal enquiry. HMRC places the utmost importance on the security of confidential material and we have in place very clear processes governing the handling of such material.”

She explained that the laptop was password protected using a complex code and that the data was locked with high-level encryption.

"It looks like the HMRC has put in place numerous types of protection which has ensured that the data on this laptop cannot be used by fraudsters," said Philip Wicks, a security consultant at Morse.

"However, this incident once again highlights the need for organisations to think long and hard about the data they allow employees to take offsite on laptops and mobile devices.

"Organisations should have policies and procedures in place that dictate what information can and cannot be taken off the premises."

The laptop was stolen when a member of HMRC was doing a regular audit of the banks' information on 20 September. This involved checking the details of current account holder information against records.

"By taking full responsibility for this loss, HMRC is a perfect example of the rapidly changing attitude to data breach disclosure in the UK," said Jamie Cowper, director of European marketing at enterprise data protection firm PGP Corporation.

"With top-level encryption making it virtually impossible to access the data on the laptop, HMRC had no real obligation or reason to report the breach.

"As such, this voluntary disclosure shows a refreshing level of ethical responsibility and commitment to its customers."

HMRC has advised the banks to notify their customers immediately.

See also:

reader comments

related articles

Gap

Stolen Gap laptop exposes 800,000 job applicants

Clothing retailer fails to encrypt information 01 Oct 2007

 

Andy McNab's laptop nabbed by thief

Who dares nicks 14 Sep 2007

Trouble in Eden as laptop goes missing

Sensitive information lost on Eden Project laptop 18 Jun 2007

M&S laptop theft puts 26,000 at risk

Exposure of personal details could lead to ID theft 09 May 2007

US agency loses payroll hard drive

Transportation Security Administration drive holds details on 100,000 staff 08 May 2007

BBC partner loses children's data

Beeb apologises for Objective Productions loss 11 Aug 2008

Organisations lose confidential data

Experts warn that password security is not sufficient 25 Sep 2007

MoD launches inquiry into laptop theft

Parliamentary meeting reveals catalogue of errors 22 Jan 2008

latest news

Red Hat a good fit for Qumranet

Open source behemoth opens up Windows opportunities with acquisition of virtualisation specialist 05 Sep 2008

Infor praises partners

Software vendor outlines its channel vision at second annual EMEA partner summit in Marbella 05 Sep 2008

Version One and Accurate launch university push

Software vendors link arms to create integrated document and financial management offering for universities 05 Sep 2008

Most commented stories

poll

Stormy times ahead for PBX?

Stormy times ahead for PBX?

Will the credit crunch affect PBX takeup?

Previous poll results

In The Studio With CRN: Josh Claman, Dell

In an editorial coup for CRN, Josh Claman, vice president of EMEA channels at Dell, talks to CRN TV about the vendor's channel plans

CRN Fight Night bouts are LIVE!

ALL the bouts from CRN's first ever white collar boxing event at The Brewery in Chiswell Street, are now online in their full glory for CRN readers to watch.

events

CRN Golf Challenge 2008

CRN Channel Golf Challenge 2008

CRN's annual golfing day will this year be held on 16 September at a championship course in East Sussex

CRN Reseller Leadership Forum logo

CRN Reseller Leadership Forum

An exclusive channel conference from CRN, to be held over one action-packed day in September 2008

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

White papers

Search white papers

Top categories