Feeds

Deloitte loses hundreds of thousands of pension details

Vodafone, rail union and others

The Essential Guide to IT Transformation

Deloitte has admitted losing a laptop containing thousands of people's pension details, but said the data was encrypted and the machine password-protected, and it had no evidence the data had been misused.

The laptop contained 150,000 railway workers' details as well as details on all UK Vodafone staff with pensions and other unnamed pension funds. The lappy was stolen from a Deloitte staffer's handbag last month. The machine held personal information but not bank details. Deloitte was auditing the pension funds.

A letter sent to Vodafone staff, and seen by The Register, said the details included names, National Insurance numbers, dates of birth, pensionable salary, earnings and contributions.

Pension holders from the rail union got a similar reassuring letter, but Gerry Doherty, general secretary of the Transport Salaried Staff Association, called for an urgent inquiry.

He said: "We are extremely concerned that this personal information affecting well over 100,000 people has gone missing.

"All we have received are bland assurances that everything is going to be all right."

A spokesman for Deloitte said the laptop contained pension fund databases from several clients.

The official Deloitte line is:

A handbag with a Deloitte laptop in it was stolen from a public place in September. The laptop held information which included employee details of individuals from a number of Deloitte's clients. It did not include addresses or bank account information. The theft was immediately reported to the police and relevant clients were notified.

The laptop was protected by a number of security measures, including start up password, operating system user ID/password authentication and encryption.

Deloitte has information security policies which include guidelines for employees to ensure they pay close attention to their laptops when in public places. Nevertheless, and very unfortunately, this theft still occurred.

We believe that the likelihood of unauthorised access to the data held on this laptop is remote due to the opportunistic nature of the theft and the security controls.

Vodafone said: "Vodafone is extremely concerned about the breach in security of our employees’ personal information and we take the matter very seriously.

"Deloitte is a highly reputable firm and also sincerely regrets that this opportunistic theft has happened. We have written to our employees assuring them that we are thoroughly investigating the matter." ®

Build a business case: developing custom apps

More from The Register

next story
14 antivirus apps found to have security problems
Vendors just don't care, says researcher, after finding basic boo-boos in security software
'Things' on the Internet-of-things have 25 vulnerabilities apiece
Leaking sprinklers, overheated thermostats and picked locks all online
iWallet: No BONKING PLEASE, we're Apple
BLE-ding iPhones, not NFC bonkers, will drive trend - marketeers
Only '3% of web servers in top corps' fully fixed after Heartbleed snafu
Just slapping a patched OpenSSL on a machine ain't going to cut it, we're told
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Israel's Iron Dome missile tech stolen by Chinese hackers
Corporate raiders Comment Crew fingered for attacks
Tor attack nodes RIPPED MASKS off users for 6 MONTHS
Traffic confirmation attack bared users' privates - but to whom?
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Maximize storage efficiency across the enterprise
The HP StoreOnce backup solution offers highly flexible, centrally managed, and highly efficient data protection for any enterprise.