UK Government was warned on data loss

Risk assessment raised concern about junior staff access in 2004

Matt Chapman

The UK Government was warned that allowing junior staff to access the child benefit database was a security risk three years before discs containing 25 million records were lost.

Treasury risk manager Richard Fennelly carried out the assessment in March 2004 and sent a letter warning of weak procedures to the Treasury.

Advertisement

That revelation will cause embarrassment for current Prime Minister Gordon Brown, who was Chancellor of the Exchequer at the time.

"Fraudulent/malicious activity was not being detected," said a copy of Fennelly's comments obtained by the News of the World.

"Live support staff had root access and could do anything without being detected with obvious risks."

Fennelly also warned that there was "no encryption between certain elements in the system".

Shadow work and pensions secretary Chris Grayling said the document rubbished Gordon Brown's claims in Parliament that the data breach was a one-off incident.

"Now we know that internal watchdogs in the government were warning three years ago that the child benefit database was at risk," he told the News of the World.

"Because no one took any action we now face a situation where millions of bank account details and information about all our children has been lost."

HM Revenue and Customs (HMRC) lost discs containing the child benefit records of 25 million people, including the bank details of 7.25 million families, when it sent the unencrypted data through the regular postal service.

Information Minister Richard Thomas has warned that other damaging data loss incidents could emerge, as several public bodies have secretly admitted to losing data following the HMRC crisis.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Lost HMRC data sounds wake up call for security pros

Managing risk is biggest driver behind security strategies

Security experts slam Soca job cuts

Greatly increased threat to UK business

Information chief warns of further data loss

Organisations coming forward to confess their sins, says Thomas

Florida man arrested after huge data theft

Information on 8.5 million customers on sale for five years

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

V3.co.uk weekly debrief, 5 Feb 2010

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Analysis and Reports

Using managed services to protect mobile data users from the latest security threats

Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations

Using a hostbased recovery system for mission-critical systems

Poll

Adobe Flash poll

Adobe Flash poll

Do you agree with Steve Jobs about Flash being buggy?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Neil Sanderson

Interview: Microsoft UK virtualisation chief Neil Sanderson

Sanderson outlines Microsoft's plans for Hyper-V, cloud computing and virtual...

Google

Google moves into social networking with Buzz

Facebook gets opposition in consumer and enterprise spheres

Nvidia

Nvidia pitches Optimus as prime notebook platform

New system pairs onboard and discrete chips

OpenDNSSEC

OpenDNSSEC service goes live

New security project encrypts Domain Name System traffic

Primary Navigation