Global InformationList of UK government data losses information
The following is a list of UK government data losses. It lists reported instances of the loss of personal data by UK central and local government, agencies, non-departmental public bodies, etc., whether directly or indirectly because of the actions of private-sector contractors. Such losses tend to receive widespread media coverage in the UK.
 | This list is incomplete; you can help by adding missing items. (September 2008) |
| Date | Department | Number of records lost |
Narrative | References | |
|---|---|---|---|---|---|
| 2017 | Heathrow Airport | 2.5GB / 76 folders | Lost unencrypted USB storage device containing complete security information for Heathrow airport including badges, maps, CCTV camera locations, etc. | [1] | |
| 2015 | Ministry of Defence | British Army footage and photographs of Operation Motorman were found to be missing. | [2] | ||
| 2014 | Foreign Office | Records of Diego Garcia flights and the UK's role in the CIA rendition programme were destroyed by water damage. | [3] | ||
| 2014 | Home Office | 114 | Files linked to 1980s Westminster paedophile ring allegations were found to be missing. (See also: Westminster paedophile dossier.) | [4] | |
| 2013 | Serious Fraud Office | Documents related to the investigation of BAE Systems were lost accidentally. The data amounted to 32,000 physical pages of text, 81 tapes of audio, and other electronic media. | [5] | ||
| 2013 | November | Suffolk County Council | An unencrypted USB memory stick was found containing information from the county’s adult and community services department. It had internal memos and copies of e-mails about forthcoming projects – and it also had tables containing the names of clients. | [6] | |
| 2013 | July | NHS Greater Glasgow and Clyde | 60 | A folder containing patient records was found in a car park and handed in by a member of the public. | [7] |
| 2012 | Greater Manchester Police | over 1,000 | An unencrypted USB stick containing details of witnesses with links to serious criminal investigations that was being kept in a police officer's house was stolen in a burglary. The force was fined £120,000. | [8] [9] | |
| 2012 | South London NHS Trust | 600 | Records on 600 maternity patients and their newborn children were lost by misplacing unencrypted USB sticks. | [10] | |
| 2012 | May | NHS Surrey | 3,000 | Computer used by the NHS was sold on auction website eBay without being properly cleansed of patient records. | [11] |
| 2012 | February | Office for Nuclear Regulation (ONR) | A memory stick containing a safety assessment of a nuclear power plant in north-east England has been lost by an official. The unencrypted USB pen drive, containing a 'stress test' safety assessment of the Hartlepool plant. | [12] | |
| 2011 | February | Powys County Council | A file containing details of a child protection case was leaked accidentally. The council was fined £130,000. | [13] [14] [15] [16] | |
| 2010 | September | Brighton General Hospital | Hard drives containing patient data were stolen. | [17] [18] | |
| 2008 | November | Department for Work and Pensions | n/a | USB memory stick, apparently encrypted and containing passwords for an old version of the Government Gateway, a website giving access to millions of records of personal data. | [19][20] |
| 2008 | October | Ministry of Defence | 1,700,000 | Hard drive being held by contractor EDS is found to be missing. | [21] [22] |
| 2008 | September | Service Personnel and Veterans Agency | 50,500 | Three USB portable hard drives with details of staff are allegedly stolen from a high security facility at RAF Innsworth. The Agency holds records on 900,000 current and former personnel. Stolen records included sensitive information about the private lives of senior staff. | [23] [24] [25] |
| 2008 | September | National Offender Management Service | 5,000 | A hard drive containing details of 5,000 employees of the National Offender Management Service was lost by EDS. | [26] |
| 2008 | September | Insolvency Service | 400 | Names, addresses and bank details of up to 400 directors of 122 firms were lost when four laptops were stolen from a Manchester premises. | [27] |
| 2008 | September | Tees, Esk and Wear Valleys NHS Trust | 200 | Memory stick with details of patients found in a public park. | [28] |
| 2008 | August | Home Office | 84,000 | PA Consulting lost an unencrypted memory stick containing details of high risk, prolific and other offenders. | [29] |
| 2008 | August | Colchester Hospital University NHS Foundation Trust | 21,000 | A manager's unencrypted laptop holding patient addresses and treatment details is stolen from his car whilst on holiday in Edinburgh | [30] |
| 2008 | January | Royal Navy | 600,000 | A Royal Navy officer's laptop was stolen that contained the details of 600,000 applicants and others who had expressed interest in joining the Armed Forces including both the Navy, Marines and Air Force. | [31] |
| 2007 | December | Department for Work and Pensions | 45,000 | West Yorkshire benefit claimants' in data lost. | [32] |
| 2007 | December | Department for Work and Pensions | 000s | CDs with personal data found at the home of a former contractor. | [33] |
| 2007 | November | City and Hackney Teaching Primary Care Trust | 160,000 | "Heavily encrypted" disks containing details of children are lost by couriers. The loss prompted the agency to implement hard drive and USB memory stick encryption systems across all PCs. | [34] |
| 2007 | November | Foreign and Commonwealth Office | 50,000 | Details of visa applicants were made available on an FCO website. | [35] |
| 2007 | November | HM Revenue and Customs | 25,000,000 | Two CDs containing details of the families of child benefits claimants went missing in the post. HMRC's handling of data was described as "woefully inadequate" and staff were described as "muddling through" in a June 2008 Independent Police Complaints Commission report. | [36] [37] [38] [39] |
| 2007 | July | Ministry of Justice | 5,000 | Hard disk with details of HM Prison Service staff is lost on the premises of EDS. | [40] |
| 2007 | May | Driving Standards Agency | 3,000,000 | Hard disk with details of candidates for the driving theory test was lost in a premises in Iowa by subcontractors. | [41] |
| 2007 | May | Foreign and Commonwealth Office | 50 | Details of individuals made public after "unauthorised disclosure by a contractor" | [42] |
| 1961 | Foreign Office | Many of the most sensitive documents from the UK's colonial era were destroyed under the direction of Secretary of State for the Colonies Iain Macleod. | [43] | ||