Grab the Waders: UK Flood of Lost Personal Info

wading-boots-2.gif The Driver and Vehicle Agency in Coleraine, Co Derry has admitted Tuesday that two unencrypted computer discs containing the names and addresses of over 6 000 motorists in Northern Ireland have been lost in the post.

Separately, the HM Prison Service disclosed that confidential personal details of dozens of prisoners intended to be sent to Norfolk police were instead delivered to a private company. The letters gave names, criminal histories and addresses of more than 40 serious offenders that were being released - including pedophiles.

Similarly, the National Health Service (NHS) that Sefton Primary Care Trust has sent thousands of staff records to four private companies by mistake. The personal details included dates of birth, national insurance numbers, pensions and salary details.

Then yesterday, the NHS also confirmed that a computer disc containing the names, dates of birth and addresses of 160,000 children data was sent to St Leonard's Hospital in Hackney but failed to reach the right department - even though it was signed for by hospital staff. At least in this case, the data was encrypted using a 256 bit cipher.


Risk Factor

IEEE Spectrum's risk analysis blog, featuring daily news, updates and analysis on computing and IT projects, software and systems failures, successes and innovations, security threats, and more.

Robert Charette
Spotsylvania, Va.
Willie D. Jones
New York City