Royal Navy laptop goes adrift

A laptop containing personal data on around 600,000 applicants to the armed forces has been stolen from a Royal Navy officer, the Ministry of Defence admitted on Friday.

Compromised personal details of at least 3,500 applicants to the Royal Marines, the Royal Navy and the Royal Air Force include National Insurance numbers, doctors' addresses, passport numbers and bank account information.

The MoD said in a statement that it is treating the loss of data with the " utmost seriousness".

The Association for Payment Clearing Services has been asked to watch out for unauthorised access to bank accounts, and the MoD has written to the 3,500 people whose bank details were stolen.

The theft took place in Birmingham on 10 January, and is being jointly investigated by the MoD and West Midlands Police.

The incident was not reported until 18 January to avoid compromising the investigation, according to the MoD.

A report in The Times suggests that the junior Royal Navy officer responsible for safeguarding the laptop could now face a court martial.

This latest security blunder is an indication that lessons have still to be learned from the child benefit data loss at HM Revenue & Customs in November last year, according to data security specialist Check Point.

"What will it take for organisations to understand the risks?" said Nick Lowe, regional director for Northern Europe at Check Point.

"The HMRC data leak happened two months prior to this theft, but apparently the personal data on the Royal Navy laptop was not encrypted despite the easy availability of such software."

A survey of UK companies by Check Point in November 2007 found that only 48 per cent used data encryption software, and that 65 per cent had no intention of changing IT spending priorities in light of the breaches.

"It seems that some companies are still saying that 'it cannot happen here'. This laptop theft shows that it can happen all too easily," said Lowe.

This is the latest data debacle to embarrass the government following HMRC's loss of two CDs containing personal data around 25 million people.

The Driving Standards Agency admitted to losing the records of three million learner drivers in December, and the Department of Health lost patient data on nine NHS regional trusts.

Defence Secretary Des Brown is due to make a statement to Parliament regarding the Royal Navy incident this week.

See also:

US security agency leaks data

Damning report slams TSA  14 Jan 2008

New Year resolutions for security managers

Time to push security up the IT agenda  14 Jan 2008

Barclays chairman has identity stolen

Thief gets away with £10,000  11 Jan 2008

Clarkson eats words over lost data

Presenter loses £500 to fraudsters  08 Jan 2008

MPs call to criminalise data loss

Justice Select Committee demands heavy fines and/or jail terms  03 Jan 2008

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!