Feeds

Deloitte loses hundreds of thousands of pension details

Vodafone, rail union and others

Secure remote control for conventional and virtual desktops

Deloitte has admitted losing a laptop containing thousands of people's pension details, but said the data was encrypted and the machine password-protected, and it had no evidence the data had been misused.

The laptop contained 150,000 railway workers' details as well as details on all UK Vodafone staff with pensions and other unnamed pension funds. The lappy was stolen from a Deloitte staffer's handbag last month. The machine held personal information but not bank details. Deloitte was auditing the pension funds.

A letter sent to Vodafone staff, and seen by The Register, said the details included names, National Insurance numbers, dates of birth, pensionable salary, earnings and contributions.

Pension holders from the rail union got a similar reassuring letter, but Gerry Doherty, general secretary of the Transport Salaried Staff Association, called for an urgent inquiry.

He said: "We are extremely concerned that this personal information affecting well over 100,000 people has gone missing.

"All we have received are bland assurances that everything is going to be all right."

A spokesman for Deloitte said the laptop contained pension fund databases from several clients.

The official Deloitte line is:

A handbag with a Deloitte laptop in it was stolen from a public place in September. The laptop held information which included employee details of individuals from a number of Deloitte's clients. It did not include addresses or bank account information. The theft was immediately reported to the police and relevant clients were notified.

The laptop was protected by a number of security measures, including start up password, operating system user ID/password authentication and encryption.

Deloitte has information security policies which include guidelines for employees to ensure they pay close attention to their laptops when in public places. Nevertheless, and very unfortunately, this theft still occurred.

We believe that the likelihood of unauthorised access to the data held on this laptop is remote due to the opportunistic nature of the theft and the security controls.

Vodafone said: "Vodafone is extremely concerned about the breach in security of our employees’ personal information and we take the matter very seriously.

"Deloitte is a highly reputable firm and also sincerely regrets that this opportunistic theft has happened. We have written to our employees assuring them that we are thoroughly investigating the matter." ®

New hybrid storage solutions

More from The Register

next story
Google recommends pronounceable passwords
Super Chrome goes into battle with Mr Mxyzptlk
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
Snowden, Dotcom, throw bombs into NZ election campaign
Claim of tapped undersea cable refuted by Kiwi PM as Kim claims extradition plot
Reddit wipes clean leaked celeb nudie pics, tells users to zip it
Now we've had all THAT TRAFFIC, we 'deplore' this theft
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
TorrentLocker unpicked: Crypto coding shocker defeats extortionists
Lousy XOR opens door into which victims can shove a foot
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.