Feeds

Government Gateway login details found in pub car park

Transformational security breaches

The Power of One Infographic

Updated Key government services were taken offline over the weekend after the discovery in a pub car park of a pocket storage device containing details of the Government Gateway. The Gateway is intended to provide a central secure login service for a range of government systems, including tax credits and self assessment, so taking it offline paralyses these too, before you can say 'single point of failure'.

The device, which was passed to the Mail on Sunday last week, was lost two weeks ago outside a pub in Cannock, Staffordshire, by an employee of Atos Origin. In 2006 Atos Origin won a £46.7m five-year contract to provide managed IT services for the Government Gateway.

The Department of Work & Pensions claims that the data on the device was encrypted and the security of the Government Gateway had not been breached. However, according to the Mail, Jacques Erasmus, a security expert who examined the device for the paper, said it contained passwords, security software and "source code". Erasmus told the paper: "I could decrypt those passwords to log in to the system and roam around the network. As we can see from the data on the USB stick, the systems contain highly sensitive personal information. If you can crack those encrypted passwords, and it would just be a matter of time, you could potentially access those 12 million accounts and those details."

In a statement Atos Origin said that the removal of the device from its premises was in direct breach of its operating principles, while the DWP said that an "urgent investigation" was under way.

By lunchtime, the Information Commissioner had weighed in, with a statement informing us Richard Thomas "is now awaiting the results of ongoing investigations to establish the facts and the nature and extent of any risk to individuals."

The statement added, "The Information Commissioner expects the Government to take appropriate damage limitation steps as its first priority."

A year after the MHMRC data debacle, this sounds hopeful, at best.

Meanwhile, in an entirely unrelated piece of joined-up data loss, DWP Secretary James Purnell has been spotted shedding confidential documents on a train. ®

Maximizing your infrastructure through virtualization

More from The Register

next story
Sit back down, Julian Assange™, you're not going anywhere just yet
Swedish court refuses to withdraw arrest warrant
UK Parliament rubber-stamps EMERGENCY data grab 'n' keep bill
Just 49 MPs oppose Drip's rushed timetable
MPs wave through Blighty's 'EMERGENCY' surveillance laws
Only 49 politcos voted against DRIP bill
EU's top data cops to meet Google, Microsoft et al over 'right to be forgotten'
Plan to hammer out 'coherent' guidelines. Good luck chaps!
US judge: YES, cops or feds so can slurp an ENTIRE Gmail account
Crooks don't have folders labelled 'drug records', opines NY beak
Delaware pair nabbed for getting saucy atop Mexican eatery
Burrito meets soft taco in alleged rooftop romp outrage
British cops cuff 660 suspected paedophiles
Arrests people allegedly accessing child abuse images online
LightSquared backer sues FCC over spectrum shindy
Why, we might as well have been buying AIR
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Mobile application security vulnerability report
The alarming realities regarding the sheer number of applications vulnerable to attack, and the most common and easily addressable vulnerability errors.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.