Secure USB Drive

The UK Ministry of Defence’s latest resource accounts (PDF at link) show that the department suffered eight serious data breaches from 2008 to 2009, compared with just two in the preceding year.

The biggest incident was the loss of a portable hard disk from a contractor’s premises, which contained the names, passport information and bank account details of an estimated 1.7 million service personnel.

Others included the theft of three USB sticks from “secure government premises”, which contained details of all RAF service personnel who served between 2002 to 2008 and details of family members. 

As with the data loss incidents involving HSBC we mentioned recently, the Ministry says it has launched a campaign to educate staff about the importance of data security, together with training courses on protecting information.  These are good signs.  But training alone isn’t enough – security demands a mix of policies and solutions in order to be effective.  There is still some way to go before we reach the target of true security for all personal data.