Home > Financial Scams > HMRC Data Loss Scandal

HMRC Data Loss Scandal

By: Chris Nickson - Updated: 7 Oct 2012 | comments*Discuss
 
Scandal Internet Data Recovery Software

The big scandal occurred in November 2007 when it was announced that HMRC - the tax people - had lost two discs containing data, including bank details, on some 25 million people in the UK. It served to highlight the problems that exist with personal data, as well as Internet safety and life online, as well as the future of data recovery.

It turned out to be the first of a number of revelations of data loss by government agencies and private companies, with many laptops reported as stolen, and all too often containing personal data on UK citizens that wasn't encrypted to keep it out of the hands of thieves.

How The HMRC Data Scandal Happened

The problem with HMRC data actually began in October 2007. Staff in an office in the Northeast sent two password-protected discs containing personal data on 25 million child benefit recipients (amazingly, it had nothing to do with tax!) to an office in the South. It went via internal mail, unrecorded, and handled by a courier service. For some reason - and no investigation has discovered what happened - the discs never arrived.

However, no announcement was made until November, when the Chancellor of the Exchequer told Parliament what had happened. Although he emphasised that the discs were protected by a password, what he didn't inform the nation was that the protection itself was actually very flimsy, and could easily be broken by a competent hacker with simple software.

Although there was no evidence that criminals had the information, people were still urged to monitor their bank accounts. However, had HMRC followed the urging of the National Audit Office that wouldn't have been necessary; it had recommended stripping bank details from the discs, which wasn't done because it was deemed too expensive, although the actual cost was estimated at just over £600.

Early in 2008 phishing scams regarding the data loss began appearing on the Internet. People received e-mails with a link where they could supposedly claim a refund from the government for the loss. However, when that link was clicked, it took online users to a phishing site which took personal and bank details.

After the HMRC data scandal broke, it was followed by a number of others, both from the government and private companies, including financial institutions, about the loss of data and stolen laptops, often with unencrypted data. In the case of bank and tax details, those can be devastating in the wrong hands.

What Can Be Learned From The HMRC Data Scandal?

Perhaps the most worrying outcome of the HMRC data scandal is learning how governments and companies treat personal data - in an almost cavalier fashion. In these days of software that can be poisoned with key loggers and other malware, and the number of hacking attacks, it's almost criminal. The Information Commissioner has thought so, too, and has promised to prosecute those who don't take adequate steps to protect personal data.

Although there's little ordinary people can do about data losses like that, there are steps we can take to protect our personal data on the Internet. When online, be careful about following links, and never click on links in e-mails. Use a good firewall and anti-virus software, as well as spyware detection, and run them frequently to scan your computer.

Data recovery and file recovery are also important, in the event your computer crashes. Always back things up, whether it's onto an external hard drive, memory stick or CD. That makes the recovery of data and files simple. It takes a little work to do it regularly, but the peace of mind is worthwhile.

You might also like...
Share Your Story, Join the Discussion or Seek Advice..
Why not be the first to leave a comment for discussion, ask for advice or share your story...

If you'd like to ask a question one of our experts (workload permitting) or a helpful reader hopefully can help you... We also love comments and interesting stories

Title:
(never shown)
Firstname:
(never shown)
Surname:
(never shown)
Email:
(never shown)
Nickname:
(shown)
Comment:
Validate:
Enter word:
Latest Comments
  • nikasavictim
    Re: Builder's Scams
    Be aware of the company called Nikasa Build & Design. We made a big mistake in trusting them and giving them thousands of pounds in advance for a…
    25 August 2020
  • caroline23red
    Re: Sky TV Scam
    I just received a call from 01846 261 362 saying they were from Sky, very unsure asian voice which sounded to come from a call centre but I was…
    10 August 2020
  • Jaybee
    Re: Sky TV Scam
    I had a a man from abroad, indian I think, call me on my landline claiming to be from Sky, I was told my top box insurance was due and I needed to pay…
    5 August 2020
  • Amira
    Re: Sky TV Scam
    I’ve just had a phone call from a man claiming to be from sky telling me that he needs me to log into my computer so that he can help me set up my new…
    6 July 2020
  • Yak
    Re: Sky TV Scam
    Just had phone call saying my sky broadband wasn't working correctly and could I go to my computer and log into sky There is nothing wrong with my…
    29 June 2020
  • Enzo11
    Re: Congestion Charge Scam
    Due to payment failure your Congestion Charge Auto Pay service will be suspended on 05/04/2020.To pay log onto tfl.gov.uk/congestioncharge…
    31 March 2020
  • Sue
    Re: Sky TV Scam
    I just had phone call but it was from my own number saying they were sending me new box as mine was out of date. The address they had I moved from ten…
    18 March 2020
  • Watchful
    Re: Vishing Scam
    Ordered an item on eBay, due for delivery next day. Received a text message from 38794 asking me to confirm the contents of the box, as the item was…
    12 March 2020
  • Mow
    Re: Sky TV Scam
    Just had a scam call regarding SKY. Man gave me a name, telephone No. and reference. Said that my signal was being interfered with. Gave me another IT…
    18 February 2020
  • Tee
    Re: Safe Travel Gigolos
    I had a Driver pursue me for about 3 months by showing up at places I frequented & buying me drinks. After deciding to give him a chance, his…
    4 February 2020