Home > Financial Scams > HMRC Data Loss Scandal

HMRC Data Loss Scandal

By: Chris Nickson - Updated: 7 Oct 2012 | comments*Discuss
 
Scandal Internet Data Recovery Software

The big scandal occurred in November 2007 when it was announced that HMRC - the tax people - had lost two discs containing data, including bank details, on some 25 million people in the UK. It served to highlight the problems that exist with personal data, as well as Internet safety and life online, as well as the future of data recovery.

It turned out to be the first of a number of revelations of data loss by government agencies and private companies, with many laptops reported as stolen, and all too often containing personal data on UK citizens that wasn't encrypted to keep it out of the hands of thieves.

How The HMRC Data Scandal Happened

The problem with HMRC data actually began in October 2007. Staff in an office in the Northeast sent two password-protected discs containing personal data on 25 million child benefit recipients (amazingly, it had nothing to do with tax!) to an office in the South. It went via internal mail, unrecorded, and handled by a courier service. For some reason - and no investigation has discovered what happened - the discs never arrived.

However, no announcement was made until November, when the Chancellor of the Exchequer told Parliament what had happened. Although he emphasised that the discs were protected by a password, what he didn't inform the nation was that the protection itself was actually very flimsy, and could easily be broken by a competent hacker with simple software.

Although there was no evidence that criminals had the information, people were still urged to monitor their bank accounts. However, had HMRC followed the urging of the National Audit Office that wouldn't have been necessary; it had recommended stripping bank details from the discs, which wasn't done because it was deemed too expensive, although the actual cost was estimated at just over £600.

Early in 2008 phishing scams regarding the data loss began appearing on the Internet. People received e-mails with a link where they could supposedly claim a refund from the government for the loss. However, when that link was clicked, it took online users to a phishing site which took personal and bank details.

After the HMRC data scandal broke, it was followed by a number of others, both from the government and private companies, including financial institutions, about the loss of data and stolen laptops, often with unencrypted data. In the case of bank and tax details, those can be devastating in the wrong hands.

What Can Be Learned From The HMRC Data Scandal?

Perhaps the most worrying outcome of the HMRC data scandal is learning how governments and companies treat personal data - in an almost cavalier fashion. In these days of software that can be poisoned with key loggers and other malware, and the number of hacking attacks, it's almost criminal. The Information Commissioner has thought so, too, and has promised to prosecute those who don't take adequate steps to protect personal data.

Although there's little ordinary people can do about data losses like that, there are steps we can take to protect our personal data on the Internet. When online, be careful about following links, and never click on links in e-mails. Use a good firewall and anti-virus software, as well as spyware detection, and run them frequently to scan your computer.

Data recovery and file recovery are also important, in the event your computer crashes. Always back things up, whether it's onto an external hard drive, memory stick or CD. That makes the recovery of data and files simple. It takes a little work to do it regularly, but the peace of mind is worthwhile.

You might also like...
Share Your Story, Join the Discussion or Seek Advice..
Why not be the first to leave a comment for discussion, ask for advice or share your story...

If you'd like to ask a question one of our experts (workload permitting) or a helpful reader hopefully can help you... We also love comments and interesting stories

Title:
(never shown)
Firstname:
(never shown)
Surname:
(never shown)
Email:
(never shown)
Nickname:
(shown)
Comment:
Validate:
Enter word:
Latest Comments
  • Sensei
    Re: Sky TV Scam
    Had a call from 01571981092 supposedly from sky. The man on the other end obviously of another country informed me that my broadband was running low.…
    14 November 2019
  • Jane
    Re: Sky TV Scam
    Just had third phone call from 01604899316. Telling me I was due a refund of £205. I have never had sky. They gave a name and address of the previous…
    11 November 2019
  • Fred_UK
    Re: Sky TV Scam
    We have just had the same thing happen. On speaking with the bank, they have stated that the scammer could set up Direct Debits and maybe standing…
    30 October 2019
  • JohnG
    Re: Sky TV Scam
    Had a call from 01582544397 saying it was Sky TV and that our current box was to be upgraded free of charge and when I said I didn't want to our…
    19 October 2019
  • Mickyladd
    Re: Sky TV Scam
    I received a text msg stating that I had a refund of £1.12 and to click on the link provided which would take me to the sky team to confirm my bank…
    12 September 2019
  • Bally
    Re: Sky TV Scam
    Just had a phone call from sky saying our 1 year anniversary with them was approaching, had a lovely gentlemen speak to me telling me all the things I…
    28 August 2019
  • Ickle
    Re: Sky TV Scam
    Just had a call from a person called Jane with an Indian accent that my sky cover was due to run out, and that there is 3 packages with a some of money…
    28 August 2019
  • Malice
    Re: Sky TV Scam
    Just had some one telling me that my Sky contact was ending and she can help me set a new one up. Told her that I didn't know what she was talking about…
    26 August 2019
  • linxu
    Re: Vishing Scam
    if i only have fee to pay card reference number,can I pay online? Because I can only provide accurate payment reference number and amounts, the address…
    25 July 2019
  • Angry666
    Re: Sky TV Scam
    Just had a call. . I asked for his name. Location ID and what department. . He hung up. . 0114 number. Reported to sky. But they ain't interested.…
    19 July 2019