A laptop containing personal data on around 600,000 applicants to the armed
forces has been stolen from a
Royal
Navy officer, the
Ministry
of Defence admitted on Friday.
Compromised personal details of at least 3,500 applicants to the Royal
Marines, the Royal Navy and the Royal Air Force include National Insurance
numbers, doctors' addresses, passport numbers and bank account information.
The MoD said in a statement that it is treating the loss of data with the "
utmost seriousness".
The Association for
Payment Clearing Services has been asked to watch out for
unauthorised access to bank accounts, and the MoD has written to the 3,500
people whose bank details were stolen.
The theft took place in Birmingham on 10 January, and is being jointly
investigated by the MoD and
West Midlands
Police.
The incident was not reported until 18 January to avoid compromising the
investigation, according to the MoD.
A report in
The
Times suggests that the junior Royal Navy officer responsible for
safeguarding the laptop could now face a court martial.
This latest security blunder is an indication that lessons have still to be
learned from the child benefit data loss at
HM
Revenue & Customs in November last year, according to data
security specialist Check Point.
"What will it take for organisations to understand the risks?" said Nick
Lowe, regional director for Northern Europe at
Check
Point.
"The HMRC data leak happened two months prior to this theft, but apparently
the personal data on the Royal Navy laptop was not encrypted despite the easy
availability of such software."
A survey of UK companies by Check Point in November 2007 found that only 48
per cent used data encryption software, and that 65 per cent had no intention of
changing IT spending priorities in light of the breaches.
"It seems that some companies are still saying that 'it cannot happen here'.
This laptop theft shows that it can happen all too easily," said Lowe.
This is the latest data debacle to embarrass the government following HMRC's
loss of two CDs containing personal data around 25 million people.
The Driving Standards
Agency admitted to
losing
the records of three million learner drivers in December, and the
Department of
Health lost patient data on nine NHS regional trusts.
Defence Secretary Des Brown is due to make a statement to Parliament
regarding the Royal Navy incident this week.
Do you agree?
Have your say on this article