Skip to content


October 10, 2008

Ministry of Defence in new data loss scandal

Hard drive found missing during emergency audit by EDS

By Mike Simons


The Ministry of Defence and EDS are investigating the loss of a portable hard drive containing personal details of 100,000 military personnel and up to 600,000 potential recruits.

Advert

The unencrypted drive was found missing by EDS, the MoD’s IT outsourcer, during an audit that was ordered by the Cabinet Office as part of an investigation into data security across Whitehall.

The investigation was ordered after government departments lost personal information on four million people in the last year.

The MoD drive contains names, addresses, passport numbers, dates of birth, driving licence details and telephone numbers – vital information for identity thieves.

It is not clear yet whether the drive has been stolen or mislaid.

Last month the RAF defended its failure to encrypt data on three portable USB hard drives containing sensitive information that were stolen from the RAF Innsworth base in Gloucestershire.

The RAF said there was no need to encrypt the data because the drives were held in a “secure area”.

In July, the Ministry of Defence revealed that 658 laptops have been stolen over the past four years. It had previously claimed that 347 laptops were stolen between 2004 and 2007.

Nick Lowe, regional director for security vendor Check Point said: "The security of detailed, personal data of this kind cannot be left to chance. Portable discs and data cannot be left unprotected by automatic encryption, because they will go missing, be misplaced, or get stolen.”

This week HP announced plans to slash 3,378 jobs over two years following its acquisition of EDS.

Follow highlights from ComputerworldUK on Twitter
Sign up for our Daily Newsletter
The UK IT News widget Get it for your site!

« prev article | more security news | next article »

Advert

close

Email this article to a friend or colleague:




PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

close
  • This article is now being printed.
close

What are your views on this subject? Use the form below to post a comment on this article up to 1000 characters.


Characters remaining:

close

Click below to add 'Ministry of Defence in new data loss scandal - Data control & Intellectual Property - ComputerworldUK' to your blog.



If you do not have a ComputerworldUK Account and would like to use this feature, please Register.

If you are a registered, logged-in user, this will post the title and first paragraph of this story to your blog to share with your readers.

What is this?

Comments received

Nick said on Friday, 10 October 2008

is it time we had a data Tsar in the UK with real powers to punish those companies and government agencies who allow these levels of data loss to occur?

http://www.matrixstore.net/2008/10/10/a-data-tsar/

Advert

WHITE PAPERS

  • Legal risks: Employee use of the internet and email
    Exploring the challenges facing IT Mangers today and vital steps to ensure safe internet an email use by employees.
  • Phishing for victims
    This White Paper examines the phenomenon of phishing. It explains the potentially catastrophic threat it presents to all kinds of organisation. Exploding some widespread myths, it lights up the murky waters where phishing first emerged and where it continues to evolve. But it also highlights what your business can do to blunt the threat.
  • Challenges and opportunities of PCI
    The control framework implicit in the Payment Card Industry Data Security Standard (PCI DSS) provides an enterprise structure for improving operational, security, and audit performance.
  • Social CRM comes of age
    Who is this “social customer”? What strategies and tools does the new breed of CRM provide to do something about this?
  • Risk Management: Protect and Maximize Stakeholder Value
    What has held organisations back from a broader adoption of risk management programs?
*