26/08/2008

Sensitive Customer Data Sold On Auction Site

Bank details of over one million customers have been discovered on a computer sold on eBay.

The PC - sold for £35 - had sensitive information on the hard drive, comprising bank customers' private information.

The Royal Bank of Scotland (RBS) and its subsidiary, Natwest, have confirmed their customers' details were involved.

RBS said an archiving firm had informed it that the PC had apparently been "inappropriately sold-on via a third party".

A RBS spokesman said: "Any breach of these procedures is totally unacceptable and is investigated as a matter of urgency."

The information is believed to include account details and in some cases customers' signatures, mobile phone numbers and code words such as mothers' maiden names.

Mail Source, which is part of the archiving firm Graphic Data, said it was investigating how the computer equipment had been removed from a secure location.

A spokeswoman said the incident was "regrettable" and "every possible step" was being taken to retrieve the data and ensure it was "an isolated incident".

It is understood the problem came to light when Andrew Chapman, an IT manager from Oxford, bought the computer, noticed the data and raised the alarm.

An spokesman for auction website eBay said "clearly such details should never have been included in the hard drive of the computer".

"We will of course work with Graphic Data to establish how it came to be available for sale on our site".

Banks are obligated under the Data Protection Act to keep all personal information secure.

In April, HSBC said a computer disc containing details of nearly 400,000 customers went missing after being sent via a Royal Mail courier.

Last December, Norwich Union Life was fined £1.26 million pounds by the regulator for exposing its customers to the risk of fraud.

Liberal Democrat MP Tom Brake has called for a "cultural change" among banks and in government when dealing with sensitive information to prevent the current "slapdash" approach.

See: HSBC Loses Customers' Details Disc

(DS)

Related UK National News Stories
Click here for the latest headlines.

30 October 2013
Numbers Taking Up NHS Stop Smoking Service Fall
New figures have shown an 11% drop in the number of people using the NHS in England to quit smoking. The Health and Social Care Information Centre data reveals the first fall in the use of the service for four years.
21 November 2007
Fraud Alert For 25m As Child Benefit Data Lost
The loss 'in the post' of computer discs with 25m people's personal details on them has led to a major fraud alert across the UK. The child benefit data on them includes names, ages, bank and address details. Questions are alreay being asked whether Alistair Darling "is up to the job" of chancellor.
27 October 2015
15-Year-Old Arrested Over TalkTalk Data Theft
A 15-year-old boy has been arrested in connection with an alleged data theft from the TalkTalk website. The Metropolitan Police Cyber Crime Unit made the arrested on Monday at an address in County Antrim, Northern Ireland, assisted by the Police Service of Northern Ireland.
19 August 2014
New Data Shows Women Hit By 'Mid-Life Pay Crisis'
Female managers over 40 years old are earning 35% less than men, according to new data by the Chartered Management Institute (CMI) and XpertHR. To earn the same as a male manager over a career, a woman would have to work the equivalent of over 14 years more.
24 February 2010
Teen Pregnancy At 20-Year Low
Teenage pregnancies in the UK have fallen to their lowest rate in over 20 years, annual statistics published today show.