OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Dataloss] update: MoD admits data loss bigger than thought

From: security curmudgeon (jerichoattrition.org)
Date: Tue Oct 14 2008 - 03:33:14 CDT


---------- Forwarded message ----------
From: InfoSec News <alertsinfosecnews.org>

http://www.theregister.co.uk/2008/10/14/mod_bigger_loss/

By John Oates
The Register
14th October 2008

The MoD has admitted that the hard drive lost by EDS contained more
information, on more people than originally believed.

We reported on Friday that EDS had lost the removable and unencyrpted
drive containing detailed records on 100, 000 servicemen and women and
names and phone numbers for 800, 000 people who had applied to join up.

But Armed Forces minister Bob Ainsworth told the House of Commons that the
drive could contain information on up to 1.7m people who had made
enquiries to join the armed services or were serving. For people who had
only made an initial enquiry this would be just a name and phone number.
But for actual applicants the files would include next of kin, passport
and national insurance numbers, drivers' license and bank details.The
drive, used by the TAFMIS recruitment system, was unencrypted. This
follows the loss of 50, 000 personnel records from RAF Innsworth last
month.

The MoD has set up a helpline for people who think their personal details
could be at risk. Where bank details have been lost the department has
also informed payment service APACS to flag accounts for possible fraud.
MoD police are investigating the loss.

Ainsworth said the MoD holds data records for 200m people.

[...]
_______________________________________________
Dataloss Mailing List (datalossdatalossdb.org)

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml