PDA

View Full Version : The Biggest Data Disaster Ever


rond36
11-30-2007, 06:50 PM
It's being called the worst data leak of the information age. Earlier this month, U.K. officials had to admit they'd lost hard drives containing personal information on almost half the country's population, including nearly all families with children. If that's not bad enough, the databases included the worst kind of information to lose -- consumer bank account numbers.

The price tag put on the loss is already $500 million. Prime Minister Gordon Brown had to issue a public apology, and the head of Britain's Revenue and Customs office was forced to resign.

The disks lost by British officials contained intimate details on every family in the United Kingdom that claims the child benefit -- a government subsidy payment that goes to every household with children. The disks were lost in transit. The information on them included the names, addresses, dates of birth, insurance numbers and banking details. In all, data on 25 million of Britain’s 60 million citizens were on the disks.

The stolen Veterans Administration laptop may sound comparable in number (26 million), but the type of data lost in that incident -- Social Security Numbers -- pales in comparison to the lost U.K. tapes.

To really understand the importance of the U.K. leak, it's important to understand how valuable raw bank account information is. In a report written soon after the U.K. incident, Litan said Social Security numbers sell for as little as $5 on the ID theft black market. But live bank account information can sell for as much as $400.

Whenever a large-scale theft of credit card numbers is revealed -- such as the theft of nearly 90 million account numbers from TJ Maxx -- card-issuing banks generally adopt a wait-and-see attitude. Sophisticated systems allow them to flag potentially stolen card numbers and watch carefully for signs of fraud.

There is simply no parallel system for bank account numbers, Litan said. So a similar incident in the United States might force banks to close and re-issue millions of checking accounts, at enormous expense.

Full article at MSNBC.com (http://redtape.msnbc.com/2007/11/britains-lost-d.html#posts)

Had to copy and paste some of the article because MSNBC news articles are there today and maybe gone tomorrow.

My condolences go out to any of our members in the UK that have children and may have a compromised bank account.

david eaton
12-01-2007, 04:16 PM
Waht is really scary about this is that the goverment will not back down in the ID card requiring even more private information, and when challenged about data security just waffle on with rubbish. Even mor scary is the fact that this database was not under HMRC control, but being held by a private company. Who vetted all their empoyees? ( hollow laughter!)

Data Security is not compatible with government departments. Discuss.

Sylvander
12-01-2007, 05:20 PM
What if it was really no "error" at all?

Whyzman
12-02-2007, 01:44 AM
What if it was really no "error" at all?Indeed, many such situations involve insiders whose palms have been crossed with a pecuniary incentive...

George Hallam
12-02-2007, 08:53 AM
Wow thats bad... computers seem to makes lives simpler and simpler :(

Im just glad i don't live in the UK anymore

alternate
12-12-2007, 07:32 PM
Well at least it was just British families, not American families....

Hahaha, just kidding. I wonder what will happen next.

rond36
12-12-2007, 10:00 PM
What's next...

Maybe the IRS will loose hard drives containing all of the bank info for everyone that had them direct deposit their refund, or paid taxes owed by E-check or EFT last year.

Or maybe loose hard drives with digital copies of 1040 tax forms with bank info for everyone that E-filed their taxes and had the IRS direct deposit their refund, or paid taxes owed by E-check or EFT last year

Wouldn't that be a mess!

tommy
12-13-2007, 02:07 AM
And that's exactly the thing that worries me about all the talk of computerizing medical records and making them available for transmission between the doctor, hospital and who knows who else.

awaj
12-13-2007, 07:44 AM
I thoughrt we had the tech to create computer programs to wipe data if something doesn't happen in a couple of days? I know the blackberry when lost can be sent a signal to wipe it clean, or to even track it down. shouldn't laptops of that importance be given smilar programs?

sassie05
12-13-2007, 08:46 AM
...all the talk of computerizing medical records...
That is happening now. It is scary.

deddard
12-13-2007, 12:12 PM
It was CDs that were lost, not HDDs.
They were supposedly sent by courier somewhere, but never made it.
All the security protocols were breached - no encryption, insecure method of transport etc.
Rule number one - why was anyone other than IT security allowed to copy the database to CD in the first place?