Lost Laptop Exposes Thousands Of “Pensions Trust” Members Records
A lost laptop containing the personal data of 109,000 Pensions Trust members has sparked the latest in a growing list of information security breach alerts.
The missing machine was stolen from the offices of NorthgateArinso, suppliers of the Pensions Trust’s computerised pensions administration system, where it was being used “as a database for development, training and performance testing”.
Data on the drive was not encrypted but it was password protected – as if that provides much in the way of reassurance. Data held on the laptop included name, address, date of birth, NI number, name of employer, salary details, name of and relationship to nominees and, for those drawing a pension, bank account details.
Members of six of the Pension Trust’s 39 schemes were affected by the breach. The records potentially exposed data from May 2007.
The Pensions Trust sent out letters this week informing affected members that their personal details have potentially been exposed as a result of the breach.
Credit: The Register
More on CyberInsecure:
Posts
June 6th, 2009 at 10:05 am
My details were on this laptop. Do you know if I have any recourse in law to sue either firm for negligence and maladministration?