Home > Information Security News > Ninety four more breaches reported since the HMRC case
Information Security News:
EMAIL THIS LICENSING & REPRINTS

Ninety four more breaches reported since the HMRC case

By Ron Condon, UK Bureau Chief
23 Apr 2008 | SearchSecurity.co.uk

Security UK News
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

Losses of personal data are running at an "alarming" rate, according to the Information Commissioner, Richard Thomas.

The government, banks and other organisations need to regain the public's trust by being far more careful with people's personal information.
Richard Thomas,
Information Commissioner

This week he revealed that since the notorious loss of 25 million records by HMRC last November, 94 other organisations have notified his office of security breaches involving personal information.

In a written statement, Thomas said: "It is particularly disappointing that the HMRC breaches have not prevented other unacceptable security breaches from occurring. The government, banks and other organisations need to regain the public's trust by being far more careful with people's personal information."

The public sector accounted for 62 breaches, private companies reported 28 incidents, and the remaining four occurred in the charity sector.

The incidents covered the whole gamut of security breaches, and included the loss of unencrypted laptops and computer discs, memory sticks and paper records. Information had been stolen, gone missing in the post or in transit with a courier. The material included a wide range of personal details, including financial and health records.

Since the UK has no mandatory disclosure laws, the number of reported cases is viewed as the tip of a much larger iceberg. Chris Potter, a partner at PWC, said: "The real figures are much larger. The big financial institutions are now more ready to disclose any breach to the regulators, but smaller companies are less likely to."

Thomas said that in 16 of the cases his office is investigating, he had requested changes in procedures to improve security, such as implementing encryption. In three cases, the information had been recovered.

For information, go to www.ico.gov.uk



Tags: Database ProtectionData Protection SolutionsVIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts