Advertisement
Promo

Security threats Toolkit

Data Breaches

Foreign Office reports five data breaches since 2007

Kablenet.com

Published: 04 Aug 2008 08:59 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The Foreign and Commonwealth Office has reported five significant data breaches to the Information Commissioner's Office in the last financial year.

The losses, affecting less than 188 people in total, were disclosed within the department's resource accounts for the year ending 31 March, 2008.

The accounts show that, in September 2007, the Foreign and Commonwealth Office (FCO) lost data on 70 people, including their names, addresses, dates of birth and family details, through the loss of a computer, "outside secured government premises". In December, information on 36 people, including passport numbers, financial and employment details, was lost on paper, again outside government offices.

The only serious breach caused by unauthorised disclosure by a contractor, rather than by lost equipment or documents, was in May last year. The FCO said less than 50 people were affected by that breach, which was reported publicly.

That breach appears to be related to vulnerabilities with the UK visa-application website, run by contractor VFS in India.

The Information Commissioner's Office (ICO) found that the FCO had breached the Data Protection Act as a result of the breach, and the department signed a formal undertaking to comply with the Act in future. The FCO was not able to provide immediate further comment.

The Department for Environment, Food and Rural Affairs (Defra), in its resource accounts, said it reported two incidents to the ICO during 2007-08.

One incident, involving the loss of payslips in November, affected 14 people. The department has since stopped printing full bank-account details on its payslips, and said it will use Royal Mail special delivery for deliveries to the office concerned.

The second incident, in January, concerned the unauthorised disclosure of one person's name, employment record and skills.

In a summary table of events not deemed serious enough to be reported to the ICO, Defra said that it had experienced 15 further incidents of lost data, either on paper or on "inadequately protected electronic equipment". Five of those incidents occured within secure government premises and 10 outside.

The FCO's equivalent table reported one loss of data within government premises, two outside and one unauthorised disclosure.

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Did you find this article useful?


Full Talkback thread

0 comments

More in this Special Report

The top five internal security threats

The top five internal security threats

It's widely known that internal staff are the biggest threat to IT security, but what specifically should an employer watch out for? more

Keeping mobile data from going walkabout

Keeping mobile data from going walkabout

Mobile email is no longer the preserve of upper management but providing access to company information on the go has its risks more

Lib Dems call for data guardians

Lib Dems call for data guardians

The Liberal Democrats are seeking the introduction of data guardians into the public and private sector, to protect citizens' information rights more

Worker suspended over loss of prisoner data

Worker suspended over loss of prisoner data

An employee at Home Office contractor PA Consulting has been suspended after the loss of a memory stick holding the unencrypted details of every prisoner in England and Wales more

Ministry of Justice reports nine data breaches

Ministry of Justice reports nine data breaches

The ministry reported the data breaches, affecting around 45,000 people, to the Information Commissioner's Office in the last financial year more

Foreign Office reports five data breaches since 2007

Foreign Office reports five data breaches since 2007

The data breaches at the Foreign and Commonwealth Office are thought to have affected less than 188 people in total more

ICO: Gov't ignoring data-sharing hazards

ICO: Gov't ignoring data-sharing hazards

The government is blindly pursuing data-sharing plans without heeding the potential pitfalls, information commissioner Richard Thomas has claimed more

Lords presses government for data-breach law

Lords presses government for data-breach law

The House of Lords has again urged the government to introduce a data-breach notification law, adding that banks should be liable for e-fraud losses more

Video: Get the most out of your data

Video: Get the most out of your data

How do companies deal with information management? Jonathan Steel, CEO of tech-research firm The Bathwick Group, gives insights based on a recent ZDNet.co.uk benchmark survey more

Justice minister urges overhaul of gov't data handling

Justice minister urges overhaul of gov't data handling

Michael Wills has called for the government to handle data transactions as carefully as financial transactions more

MoD announces data-protection action plan

MoD announces data-protection action plan

The ministry has published a plan of how it intends to meet 51 data-policy recommendations made as part of review into the loss of MoD laptops more

Systemic failure blamed for HMRC data loss

Systemic failure blamed for HMRC data loss

Two reports have found the loss by HMRC of 25 million child-benefit claimant details was 'entirely avoidable' more

Company/Topic Alerts

Create a new alert from the list below:







Video icon

Video

Sentry Posts Blog

Met will not reopen phone hack investi...

The Metropolitan Police will not reopen its investigation into alleged phone hacking by the News of the World. In a press statement delivered outside Scotland Yard on Thursday, Assistant... More

Post a comment

FUD over ChromeOS's security already?

It hasn't taken long for the security vendors to wake to the potential of Google's new ChromeOS. The potential that is, to create FUD – fear uncertainty and doubt. In a release today,... More

Post a comment

Feds take DDoS in their stride

The US Department of Homeland Security has said that a series of distributed denial-of-service attacks began on US government networks on 4 July. However, Amy Kudwa, deputy press... More

Post a comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters