The Register® — Biting the hand that feeds IT

Feeds

Manchester plods cop £120k fine for USB-stick-inna-wallet data gaffe

Serious Serious Crime crime 'sends shivers down spine'

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

The Greater Manchester Police Force have paid a £120,000 fine after losing the details of more than a thousand people under investigation for serious drugs crime.

The personal details were kept on an unencrypted memory stick with no password protection, belonging to an officer with the Serious Crime Division team. Kept in the officer's wallet it went AWOL in July 2011 after the wallet was swiped from his kitchen table when his home was burgled.

It contained the details of 1,075 people who had been investigated by the drugs squad over the past 11 years.

The weight of the fine from the Information Commissioners Office reflects endemic data security problems that the ICO found in the Manchester police force: officers regularly used unencrypted USB sticks and there were few checks on what data could be downloaded and taken out of the office.

A similar security breach in September 2010 had prompted no change in culture, the ICO said. In 2010 a businessman found a mislaid Greater Manchester Police branded memory stick that contained sensitive anti-terrorism materials.

And officers were still not sufficiently trained in data security, the ICO found.

A unencrypted stick amnesty by the force's data controller after the breach got back a haul of 1,100 devices.

David Smith, ICO Director of Data Protection, said:

This was truly sensitive personal data, left in the hands of a burglar by poor data security. The consequences of this type of breach really do send a shiver down the spine.

It should have been obvious to the force that the type of information stored on its computers meant proper data security was needed. Instead, it has taken a serious data breach to prompt it into action.

®

Agentless Backup is Not a Myth

Greater Manchester Police Force have paid a £120,000 fine

Greater Manchester Council Tax payers have paid a £120,000 fine - basically the people whose details were leaked have paid for it.

12
1

Sir

I wonder that anyone bothered to turn up at his house when he reported the burglary.

"Hardly worth the effort mate, they'll be long gone"

<garble farble arble>

"What's that? Serious Crime squad? We'll be right on it"

7
0

Re: Greater Manchester Police Force have paid a £120,000 fine

When one government body fines another it is just an empty gesture. The money just goes round in circles.

6
0

More from The Register

 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
Flash flaw potentially makes every webcam or laptop a PEEPHOLE
But it's a Google problem - Chrome only, insists Adobe
Internet fraud still stings suckers
Australians twice as gullible as Americans
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
 breaking news
Yahoo! joins! rivals! in! PRISM! data! request! admission!
Keep calm and carry on using American tech firms, folks
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?