Email Address Password
Remember Me

Or Create a (Free) Account.
2004JanFebMarAprMayJunJul Aug Sep Oct Nov Dec
2005 Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
2006 Jan Feb Mar Apr May Jun Jul Aug Sep Oct Oct Oct
2007JanFebMarAprMayJunJulAugSepOctNovDec2007
2008JanFebMarAprMayJunJulAugSepOctNovDec2008
2009JanFebMarAprMayJunJulAugSepOctNovDec2009
2010JanFebMarAprMayJunJulAugSepOctNovDec2010
2011JanFebMarAprMayJunJulAugSepOctNovDec2011
2012JanFebMarAprMayJunJulAugSepOctNovDec2012
2013JanFebMarAprMayJunJulAugSepOctNovDec2013
2014JanFebMarAprMayJunJulAugSepOctNovDec2014

Sat 24th Nov 01:37 2007: HMRC: 25m personal records lost (and a terrible pun...)

discount tentAs I'm sure everybody knows by now, HMRC lost 25m personal records of UK citizens eligible for child benefit (7.5m families; data including name, address, DOB, NIN, bank/building society details, and the like. Two CD-ROMs were sent in the internal post (via TNT) from HMRC to NAO. The parcel didn't turn up, so the CDs were reburned and resent, and happily (?!) arrived. It seems that this happened earlier this year, in March, but the media arrived, so we didn't hear about it. Tonight, it transpires that the data had subsequently been sent from NAO to KPMG. They claim they've deleted their copies of the data now (honest!).

The media haven't gone into the detail of why password protection means nothing when the data isn't encrypted, but - in a nutshell - when there's no encryption to protect, there's no need to bother with a password.

The analogies to ID cards are too obvious to mention; I can change my bank account number, but I can't change my fingerprints or iris patterns (and even if I could, they would still remain in the hands of the unintentional recipient).

Still, this is all old news by now, it happened a few days ago. It's not really worth blogging, except for this: A listener of BBC Radio 4's Today programme suggested that this was not - as has been suggested - Gordon Brown's "Black Wednesday", but rather, that "Now is the winter of our disk contents"

I said it was a bad pun....

Update:The Child Benefit 'Personal Details' form (found via comments in the above blog - well worth reading)


Comments for 'HMRC: 25m personal records lost (and a terrible pun...)'

You could post a comment if you were logged in.

You are logged in as 0

create an account

Steve's urandom blog
Share on Twitter Share on Facebook Share on LinkedIn Share on Identi.ca Share on StumbleUpon
My Shell Scripting Book:
    Shell Scripting, Expert Recipes for Linux, Bash and more
is available online and from all good booksellers:


DefectiveByDesign.org