Sean O’Neill and Richard Ford
Win a fitness package worth more than £3,000
Confidential records and sensitive intelligence on tens of thousands of the country’s most prolific criminals have been lost in a major breach of data security at the heart of Whitehall.
Scotland Yard is investigating the loss of the information, which was taken from the Police National Computer and entrusted by the Home Office to a private consultancy firm.
The data had been encrypted for security reasons but was decoded by staff at PA Consulting Group and placed on a computer memory stick that was subsequently lost. The device contains personal details and intelligence on 33,000 serious offenders, dossiers on 10,000 “priority criminals” and the names and dates of birth of all 84,000 prisoners in England and Wales. There is also information on an unspecified number of people enlisted on drug intervention programmes.
The disappearance of such a massive amount of secret information has widespread implications. Police informants could be at risk of reprisals. Named offenders may seek rehousing or police protection from vigilantes, and individuals who believe that their personal data has been compromised could seek compensation.
Jacqui Smith, the Home Secretary, was informed on Tuesday and was said to have been furious. The loss is a major setback for her efforts to reform a department described by her predecessor John Reid as “not fit for purpose”. The police were contacted yesterday and detectives from the Serious Economic Crime Command at Scotland Yard began conducting searches, viewing CCTV material and interviewing potential witnesses.
Ministers had promised to tighten security controls. The latest loss is particularly embarrassing because the data originated at the Home Office’s headquarters, where Ms Smith, her ministers and their senior officials work.
David Ruffley, the Shadow Minister for Police Reform, said: “This shambles proves that this accident-prone Home Secretary hasn’t even got a grip of what goes on in her own building.” He said that it would be outrageous if criminals were able to claim compensation as a result.
The information from the secure police computer had been collated as part of JTRack, a programme to track persistent and prolific offenders through the criminal justice system. Access is supposed to be limited to police forces, crime reduction partnerships and other official bodies. PA Consulting, which helped to develop the national ID card scheme, was brought in to work on the project last year.
A Home Office spokesman said: “We have been made aware of a serious breach of security at the offices of external contractors. A full search has been conducted and both the police and Information Commisioner have been informed.”
A spokesman for Scotland Yard said that it had been asked to review the circumstances of the loss. He added that there was no evidence that any offence had been committed.
David Smith, the Deputy Information Commissioner, said: “It is deeply worrying that after a number of major data losses and two government reports on high-profile breaches of the Data Protection Act more personal information has been reported lost. It is vital that sensitive information is held securely at all times.”
No one at PA Consulting, which reported the loss of the memory stick to the Home Office on Monday, was available to comment.
Industry sectors news at a glance. Interactive heatmap, video and podcast
The inside track on current trends in the charity, not for profit and social enterprise sectors
Read our exclusive 100 Years of Fleming and Bond interactive timeline, packed with original Times articles and reviews
Everything the Business Traveller needs to know to make a better trip
Shortcuts to help you find sections and articles
05/2005
£13,500
08/2008
£109,950
2006
£10,750
Great car insurance deals online
£Excellent+ executive benefits
Torres and Partners
London
£49,229 - £62,035 pro rata
Charity Commission
London/Liverpool/Taunton
Alstom Power
Europe
Six Figure
Rolls Royce
Midlands/Europe
From £89,950
Great Investment, River Views
Special Offers now available
New Year in the USA!
.
Cruise the Islands of Hawaii - Pride of America
List your property with two leading travel websites
Great travel insurance deals online
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths
News International associated websites: Globrix | Property Finder | Milkround
Copyright 2008 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.
Funny
Me as a British Citizen with a Master Degree in Information Systems Management cannot get a computer Job in Britain because of my black skin, yet you have time to hire Consulting firms full of incompetent people who wont allow others to be employed. Yes an on top of it you pay them nice perks
Michael Wilson, Conley, USA
"PA Consulting, which helped to develop the national ID card scheme".
Just how stupid and incompetent does the ID Card scheme have to make New Labour look, before they give in to the inevitable and scrap it?
How much damage will it do to their electoral prospects, before they see the light?
Brian Drury, London Colney, England
The outside firm should be sacked and barred from further contracts with the government. Further no firms with people from this firm's leadership should be considered for contracts.
Unencrypted private data? There is no such thing.
Charlie, Kyle, USA
Now we know why Britain's politicians REALLY wanted the people disarmed - so the people can't give these government criminals the justice they really deserve!
Robert, Los Angeles, USA
From what I understand, the firm which lost this latest batch of data is also heavily involved in the national ID card project...God(s) help us!
Martin, Poole, Wessex
This Govt is beyond farce. The world must be laughing at us.
So Jacqui Smith is furious - does she think we are finding it funny? Funny that the Dept responsible for HOMELAND SECURITY can't even keep highly sensitive data secure. A Govt that wants ID data on every citizen. Kill the ID card scam.
Donna Walker, Effingham, England
Simple rules: data is never copied to a transportable device such as a data stick, CD or laptop unless unavoidable; if so, it must always be encrypted: sacking offence not to do this.
Frank Upton, Solihull,
The UK persuaded the rest of the EU to impose mandatory long-term retention of communications data across the entire continent. Imagine what the UK press would say if the shoe was on the other foot!
Joe, brussels, belgium
Another inexcusable example of how careless this government is with our security.
How can we stop this inept administration continuing with the doomed ID card and NHS systems ?
Both of these represent the end of our privacy, and a blank cheque for criminals and terrorists.
Heads must roll
cap, lincoln, UK
Let's hear no more about plans for a national ID databases or 'snoopers' databases of all e-mails and phone calls. It's 100% obvious that there is a systemic failure in government to manage the information they demand we hand over to them.
Colin Soames, London,
Note the mention of compensation. No one mentioned that after the child benefit fiasco last year. Any litigant interested in a pro-bono class action- 25 million of us would like to know what we can do, as our bank details were 'lost.'
jesper lemons, Manchester,
Are you kidding yourselves people? That data was worth a fortune to the right (or wrong) people, it was stolen.
John , Galway, Ireland
Confidentiality went out of the windown when New-Labour came to power. Cold calling by US companies, even to numbers that are ex-directory and TPS covered. Data losses from the Government. People ask when will it end, it will end at the next election when we kick them from power.
Nicola Clubb, Bournemouth, Dorset
Does anyone actually believe them? All the data is normally backed up and definitely not kept as the ONLY copy on a memory stick. Its not a family photo album. Are there any other reasons apart from an obvious one - selling it?
Alex, London,
And this is an administration that wants to make us carry ID cards and keep our fingerprints, DNA and medical details in some databank? Why is nobody ever punished when these losses occur?
Ross, Liverpool,
This Government is incapable of keeping any data safe. As an Accountant if I operated like that then I would be closed down. There is no way that this should cost the tax payer anything. This is negligence so the company and government minister responsible should pay.
Nigel, Solihull, UK
For gods sake its 1 blunder after another. And if this was back in the 60s/70s taking sensitive national data out of a secured location was an incredibally serious offense. If we are in a new cold war Russian spies must hardly have to do any hard work anymore,merely loiter around in whitehall.
Chris, Rochdale, UK
Surely the government can't press ahead with their crazy ID card and register scheme now. No one can trust them.
If the names of children whom the judges have said must remain anonymous are on the stick., isn't their release to a private firm a contempt of court?
E Thomson, London, England
Why doesn't this shambles of a government just put every body's personal deals on the Internet and be done with it.
At least then they wouldn't have anything left to lose.
So much for Brown's tenth? relaunch. The Titanic is now in its death throes with Captain Bottler braced for the mutiny.
john, swindon,
Simple...
Don't keep the information. Then, it can't be stolen
Are British so thick???
Andy Crofts, Oulu, Finland
Another shambles. I work in a big communications company, and hardly any of the data we use is confidential, but God help ANYONE who is found using a non secure USB memory stick for anything.
If you set secure practices in place for all data, everyone will use them without a second thought.
Paul, Leeds, England
Very shocking revelation indeed, however, I can't see the fault lies with the government as much as I dislike them. It seems the blame rests solely with PA Consulting Group. I do wonder, why was private company involved in the handling of sensitive data in the first place.
dominik, london,
Quite obviously the government needs to take a stance on data loss. From the article, it is noted that the subcontracting Consultancy company has responsibility here, as a matter of liquidation damages, the consultancy is at fault and must therefore cover the costs associated with this incident.
Graeme, UK, UK
Why should we trust them to keep our personal data safe when they have proved time and time again that they are not able to keep information safe and from prying eyes. If i was a spy in this country i could not ask for more since this government makes it so easy for me to get information. HEADS ROLL
David Sars, exeter, UK
You don't put sensitive data on a memory stick, let alone unencrypted data. How can no offense have been committed?
I've worked with data for years and never lost any because it has always been stored within a secure environment.
Absolutely insane.
Paul, Maidenhead,
Wouldn't life be easier for us all if this shambles of an administration told us what records they hadn't lost?
Lost criminal's records? I suppose that that fraternity will now bring actions for wrongful conviction and, in the biggest scam of all time, appeal every conviction in the last 11 years.
A.M. Williams, Stafford,
Why should any potential compensation claim be funded by the tax payer - any such funding should come from the Home Office pension fund!
peterj, malvern, uk
Another shambles from this pathetic government they want putting on trial
D. Fielder, halesworth, suffolk
This joke isn't funny anymore.
J.Wilkes, Gloucester,
Hhmmm lost eh? How much money is the guy that lost it gonna make. Well done Scotland Yard, please do share all the sensitive information with private companies. You are the ones that suppose to protect us from terrorists and serious criminals? God help us all. Wait till IDs become compulsory.......
Nick, Birmingham,
This is another inexcusable blunder from a government that is hell bent on putting erery personal detail of the whole population on a central data base in the name of increased security. The ID card scheme must be stopped. It is impossible to guarantee its confidentiality
John , Aberdeen,
another fine mess the government have got into - when will it end.
P Reynolds, Worcester, UK