UK gov't laptop with confidential disc sold on eBay

Comments

Related

Active Comments

Lynn says: I don't understand why this is so embarrasing - isn't that why the data was encrypted, so that incase the...

Read the rest | Reply

Bill Mayhew says: Two ideas come to mind: Some laptops have keyboards that are relatively easy for the end-user to remove. The Apple...

Read the rest | Reply

All Comments (3) | Post New

• EBay amends
• EBay changes draft version of
• Antiphishing tool adopted by eBay now available to the general public
• A question of trust and identity
• Global News Update: Monday, December 1, 2008

Zone

The Security Zone With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. Having the right policies, procedures and server configurations is critical... Learn more in The Security Zone See All Zones

February 28, 2008 (Computerworld UK) The Home Office has launched an investigation after a buyer acquired a laptop on eBay that contained a CD or DVD with confidential information.

The disc was hidden under the computer's keyboard, and discovered by a local PC repair firm, Leapfrog Computers in Bolton, when it was put in for repair. The disc had the words 'Home Office' and 'Confidential' written on it.

Both the disc and the laptop are understood to have been encrypted.

Philip Wicks of consultancy firm Morse said that whatever the circumstances of this latest data debacle, many organization were not taking sufficient care when disposing of IT equipment.

"Organizations need to use specialist techniques and tools to make sure they completely wipe hard drives clean before disposing of them or selling them on," he said. "They should be following best practices such as ISO27001:2005 (formerly BS7799). There are third party organizations that can help, however they must be vetted to ensure they are reputable and not just a broker who is out to make a quick buck, and can't be bothered to go through the process of thoroughly wiping the equipment."

The news is a further embarrassment to the government, following other major data breaches. Last November, HM Revenue & Customs lost two discs containing the details of 25 million child benefit claimants, after a junior employee sent them by unregistered post.

In December, the Driving Standards Agency said it lost a disc containing the records of 3 million learner drivers. Soon after that the Department of Health said that nine of its regional NHS trusts had lost patient data, including medical records for about 160,000 children in East London.

In January, a laptop containing personal information on about 600,000 new and potential recruits to the Royal Marines, the Royal Navy and the Royal Air Force was stolen from an officer in the Royal Navy.