Another day, another lost disk of customer data

[0iD]

This time HSBC loses it.
HSBC loses disc with customer data | Reuters

Banking giant HSBC said on Monday it has lost a computer disc containing details of nearly 400,000 customers.

The disc contains the names, dates of birth and insurance cover levels of 370,000 people who hold life assurance policies at the bank.

It does not contain addresses or bank account details, HSBC said.

"The data disk lost by HSBC contains no address or bank account details for any customer and would therefore be of very limited, if any, use to criminals," it said in a statement.

[Mblaster]

Maybe I should start advertising my services as a 'Data Transport Consultant', and demand a 6 figure salary Just set up a secure encrypted FTP for the duration of the transfer, switch off again once you're done. The risk of loosing the data then is extremely small.

I don't get why people still put a CD in the post for these kind of things, surely there's someone with a slight amount of technical knowledge involved in the process that can tell them what a stupid process they have.

[pauldarkside]

wunch of bankers

Nope, I don't understand how this sort of thing happens, or is allowed to happen in the first place. Those 400,000 should be able to charge HSBC in the same way they cahrge us whenever something goes wrong.

I hate it when lessons aren't learned from past mistakes.

[BlackDwarf]

Or at least send it Recorded Deliver/Courier so you know where the bloody thing is!

[pauldarkside]

Or at least send it Recorded Deliver/Courier so you know where the bloody thing is!

No, they're fallible too - they lose packages just the same.

[SiM]

The data was password-protected

At least they were sensible enough to do this too.

No big deal again... but i'm sure loads of people will find this outrageous and think they deserve millions of pennys in compensation...

[SiM]

Or at least send it Recorded Deliver/Courier so you know where the bloody thing is!

The disc went missing, it said, after being sent via Royal Mail courier

[DDY]

Maybe I should start advertising my services as a 'Data Transport Consultant', and demand a 6 figure salary Just set up a secure encrypted FTP for the duration of the transfer, switch off again once you're done. The risk of loosing the data then is extremely small.

I don't get why people still put a CD in the post for these kind of things, surely there's someone with a slight amount of technical knowledge involved in the process that can tell them what a stupid process they have.

If you read on:

Normally such information is passed by secure wire link, but that was not working on the day the disc was sent.

[mediaboy]

Of course - the fact that they went and lost the disc is irrelevant.

Their hardware wasn't working, so they stuck it on a disc, sent it by royal mail courier, lose the disk (for the 2nd or 3rd time (I think.. not sure for certain)) and you still think that they know what they are doing?

Meh. I'm just glad I don't have a bank account at HSBC. They lose your details more often than you have to put them in to start an account.

[stevie lee]

4 months ago my dad bought an ex fleet car that was from HSBC, there were a couple of 'sensitive' items wedged in the rear seat pockets, and a strawberry lollypop. (don't worry, we shredded and destroyed them)

i wonder what they left in other cars?

[MadduckUK]

don't worry, we shredded and destroyed them

i understand

[santa claus]

*sigh* Another reason to be concerned about personal and private information being stored in e-format and in vast quantities a la Phorm. You wait until they 'lose' a disk....

[TheAnimus]

At least they were sensible enough to do this too.

No big deal again... but i'm sure loads of people will find this outrageous and think they deserve millions of pennys in compensation...

password protected, does not mean encrypted.

[SiM]

password protected, does not mean encrypted.

Its better than nothing though

[TheAnimus]

Its better than nothing though

it IS nothing.

[SiM]

it IS nothing.

lol... how do you know it wasn't encrypted too?