Welcome Guest. | Log In| Register | Membership Benefits
  • Email this page E-mail this page
  • |  Print Print this page
  • |   Bookmark and Share

Data on 3M UK Drivers 'Lost in Iowa'

Misplaced hard drive adds to furor over lost tax data

Dec 17, 2007 | 05:22 AM

By Tim Wilson
DarkReading

The British government's IT security woes got deeper today when Transport Secretary Ruth Kelly reported to Parliament that the personal data of some 3 million U.K. drivers has been lost by a contractor in Iowa.

The administration has already been in hot water for most of the month, following the loss of as many as eight CDs containing the personal information of some 25 million taxpayers and family members. (See UK Government in Uproar Following Data Loss.)

In a statement before Parliament earlier today, Chancellor Alistair Darling told British legislators that the government has made little progress in finding the missing CDs, according to reports. Then Transport Secretary Kelly stepped to the microphone.

"In May this year, Pearson Driving Assessments Ltd, a private contractor to the Driving Standards Agency, informed the agency that a hard disk drive had gone missing from its secure facility in Iowa City, Iowa," Kelly said. "The hard disk drive contained the records of just over three million candidates for the driving theory test."

The records contained the driver's name, postal address, phone number, the test fee paid, the test center, a code indicating how the test was paid for, and an email address, Kelly said.

The lost hard drive was "formatted specifically to fit Pearson configuration" and therefore would not be easy for third parties to read, Kelly said. She did not give further details on the configuration, and the department did not say whether the data on the drive was encrypted.

Kelly also confirmed reports of last week which stated that one of her department's offices in Northern Ireland had lost the personal data of more than 6,000 drivers when two disks were lost in the mail.

The disks, which contain the names and addresses of the motorists and the license plate numbers of their 7,685 vehicles, went missing at a sorting center in Coventry, Kelly confirmed.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.


Subscribe to RSS










Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:suse linux
Published:2010-01-22
Severity:High
Description:SUSE Linux Enterprise 10 SP3 (SLE10-SP3) configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:The URL validation functionality in Microsoft Internet Explorer 7 and 8 does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
Vulnerability:bind
Published:2010-01-22
Severity:Medium
Description:ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246.


Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)