UK Government was warned on data loss

Risk assessment raised concern about junior staff access in 2004

Written by Matt Chapman

The UK Government was warned that allowing junior staff to access the child benefit database was a security risk three years before discs containing 25 million records were lost.

Treasury risk manager Richard Fennelly carried out the assessment in March 2004 and sent a letter warning of weak procedures to the Treasury.

That revelation will cause embarrassment for current Prime Minister Gordon Brown, who was Chancellor of the Exchequer at the time.

"Fraudulent/malicious activity was not being detected," said a copy of Fennelly's comments obtained by the News of the World.

"Live support staff had root access and could do anything without being detected with obvious risks."

Fennelly also warned that there was "no encryption between certain elements in the system".

Shadow work and pensions secretary Chris Grayling said the document rubbished Gordon Brown's claims in Parliament that the data breach was a one-off incident.

"Now we know that internal watchdogs in the government were warning three years ago that the child benefit database was at risk," he told the News of the World.

"Because no one took any action we now face a situation where millions of bank account details and information about all our children has been lost."

HM Revenue and Customs (HMRC) lost discs containing the child benefit records of 25 million people, including the bank details of 7.25 million families, when it sent the unencrypted data through the regular postal service.

Information Minister Richard Thomas has warned that other damaging data loss incidents could emerge, as several public bodies have secretly admitted to losing data following the HMRC crisis.

Tags:

Further reading

Lost HMRC data sounds wake up call for security pros

Managing risk is biggest driver behind security strategies   More...

Security experts slam Soca job cuts

Greatly increased threat to UK business   More...

Information chief warns of further data loss

Organisations coming forward to confess their sins, says Thomas   More...

Florida man arrested after huge data theft

Information on 8.5 million customers on sale for five years   More...

Related articles

HMRC data loss leaves 25 million exposed

Revenue chief Paul Gray resigns   More...

Information chief warns of further data loss

Organisations coming forward to confess their sins, says Thomas   More...

Royal Navy laptop goes adrift

Latest data blunder affects 600,000 people   More...

Watchdog slams 'inexcusable' security breaches

Information Commissioner gets tough   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

13 May 2008

3.06 MBBloody students, goodbye to Dixons and hacking excuses More...

BusinessGreen.com podcast logo

13 May 2008

1.82 MBEco-Entrepreneur introduction More...

12 May 2008

2.4 MBMicrosoft's battles, data breach fines and website rip-offs More...

Poll

DATA ENCRYPTION

DATA ENCRYPTION

Should encryption be mandatory for all personal data held by companies and governments?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

BlackBerry Bold

RIM unveils slimmed-down BlackBerry Bold

New handset due this summer   More...

BlackBerry Bold

BlackBerry Bold takes on 3G iPhone

New models go head-to-head, says analyst   More...

Advertisement

HP

HP 'in talks' to buy EDS

Company offering upwards of $12bn   More...

Virgin Media

Virgin prepares 50Mbps launch in 2008

Successful trial clears network for higher speeds   More...

Advertisement