Welcome Guest. | Log In| Register | Membership Benefits
  • Email this page E-mail this page
  • |  Print Print this page
  • |   Bookmark and Share

Data on 3M UK Drivers 'Lost in Iowa'

Misplaced hard drive adds to furor over lost tax data

Dec 17, 2007 | 05:22 AM

By Tim Wilson
DarkReading

The British government's IT security woes got deeper today when Transport Secretary Ruth Kelly reported to Parliament that the personal data of some 3 million U.K. drivers has been lost by a contractor in Iowa.

The administration has already been in hot water for most of the month, following the loss of as many as eight CDs containing the personal information of some 25 million taxpayers and family members. (See UK Government in Uproar Following Data Loss.)

In a statement before Parliament earlier today, Chancellor Alistair Darling told British legislators that the government has made little progress in finding the missing CDs, according to reports. Then Transport Secretary Kelly stepped to the microphone.

"In May this year, Pearson Driving Assessments Ltd, a private contractor to the Driving Standards Agency, informed the agency that a hard disk drive had gone missing from its secure facility in Iowa City, Iowa," Kelly said. "The hard disk drive contained the records of just over three million candidates for the driving theory test."

The records contained the driver's name, postal address, phone number, the test fee paid, the test center, a code indicating how the test was paid for, and an email address, Kelly said.

The lost hard drive was "formatted specifically to fit Pearson configuration" and therefore would not be easy for third parties to read, Kelly said. She did not give further details on the configuration, and the department did not say whether the data on the drive was encrypted.

Kelly also confirmed reports of last week which stated that one of her department's offices in Northern Ireland had lost the personal data of more than 6,000 drivers when two disks were lost in the mail.

The disks, which contain the names and addresses of the motorists and the license plate numbers of their 7,685 vehicles, went missing at a sorting center in Coventry, Kelly confirmed.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.


Subscribe to RSS










Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:cxf
Published:2010-08-19
Severity:High
Description:Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other products, does not properly reject DTDs in SOAP messages, which allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a crafted DTD, as demonstrated by an entity declaration in a request to samples/wsdl_first_pure_xml, a similar issue to CVE-2010-1632.
Vulnerability:libvirt
Published:2010-08-19
Severity:Medium
Description:Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
Vulnerability:libvirt
Published:2010-08-19
Severity:Medium
Description:Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors.
Vulnerability:libvirt
Published:2010-08-19
Severity:Medium
Description:Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.
Vulnerability:libvirt
Published:2010-08-19
Severity:Low
Description:Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.


Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)