List of UK government data losses

The following is a list of UK government data losses. It lists reported instances of the loss of personal data by UK central and local government, agencies, non-departmental public bodies, etc., whether directly or indirectly because of the actions of private-sector contractors. Such losses tend to receive widespread media coverage in the UK.

Date		Department	Number of records lost	Narrative	References
2017		Heathrow Airport	2.5GB / 76 folders	Lost unencrypted USB storage device containing complete security information for Heathrow airport including badges, maps, CCTV camera locations, etc.	[1]
2015		Ministry of Defence		British Army footage and photographs of Operation Motorman were found to be missing.	[2]
2014		Foreign Office		Records of Diego Garcia flights and the UK's role in the CIA rendition programme were destroyed by water damage.	[3]
2014		Home Office	114	Files linked to 1980s Westminster paedophile ring allegations were found to be missing. (See also: Westminster paedophile dossier.)	[4]
2013		Serious Fraud Office		Documents related to the investigation of BAE Systems were lost accidentally. The data amounted to 32,000 physical pages of text, 81 tapes of audio, and other electronic media.	[5]
2013	November	Suffolk County Council		An unencrypted USB memory stick was found containing information from the county’s adult and community services department. It had internal memos and copies of e-mails about forthcoming projects – and it also had tables containing the names of clients.	[6]
2013	July	NHS Greater Glasgow and Clyde	60	A folder containing patient records was found in a car park and handed in by a member of the public.	[7]
2012		Greater Manchester Police	over 1,000	An unencrypted USB stick containing details of witnesses with links to serious criminal investigations that was being kept in a police officer's house was stolen in a burglary. The force was fined £120,000.	[8] [9]
2012		South London NHS Trust	600	Records on 600 maternity patients and their newborn children were lost by misplacing unencrypted USB sticks.	[10]
2012	May	NHS Surrey	3,000	Computer used by the NHS was sold on auction website eBay without being properly cleansed of patient records.	[11]
2012	February	Office for Nuclear Regulation (ONR)		A memory stick containing a safety assessment of a nuclear power plant in north-east England has been lost by an official. The unencrypted USB pen drive, containing a 'stress test' safety assessment of the Hartlepool plant.	[12]
2011	February	Powys County Council		A file containing details of a child protection case was leaked accidentally. The council was fined £130,000.	[13] [14] [15] [16]
2010	September	Brighton General Hospital		Hard drives containing patient data were stolen.	[17] [18]
2008	November	Department for Work and Pensions	n/a	USB memory stick, apparently encrypted and containing passwords for an old version of the Government Gateway, a website giving access to millions of records of personal data.	[19][20]
2008	October	Ministry of Defence	1,700,000	Hard drive being held by contractor EDS is found to be missing.	[21] [22]
2008	September	Service Personnel and Veterans Agency	50,500	Three USB portable hard drives with details of staff are allegedly stolen from a high security facility at RAF Innsworth. The Agency holds records on 900,000 current and former personnel. Stolen records included sensitive information about the private lives of senior staff.	[23] [24] [25]
2008	September	National Offender Management Service	5,000	A hard drive containing details of 5,000 employees of the National Offender Management Service was lost by EDS.	[26]
2008	September	Insolvency Service	400	Names, addresses and bank details of up to 400 directors of 122 firms were lost when four laptops were stolen from a Manchester premises.	[27]
2008	September	Tees, Esk and Wear Valleys NHS Trust	200	Memory stick with details of patients found in a public park.	[28]
2008	August	Home Office	84,000	PA Consulting lost an unencrypted memory stick containing details of high risk, prolific and other offenders.	[29]
2008	August	Colchester Hospital University NHS Foundation Trust	21,000	A manager's unencrypted laptop holding patient addresses and treatment details is stolen from his car whilst on holiday in Edinburgh	[30]
2008	January	Royal Navy	600,000	A Royal Navy officer's laptop was stolen that contained the details of 600,000 applicants and others who had expressed interest in joining the Armed Forces including both the Navy, Marines and Air Force.	[31]
2007	December	Department for Work and Pensions	45,000	West Yorkshire benefit claimants' in data lost.	[32]
2007	December	Department for Work and Pensions	000s	CDs with personal data found at the home of a former contractor.	[33]
2007	November	City and Hackney Teaching Primary Care Trust	160,000	"Heavily encrypted" disks containing details of children are lost by couriers. The loss prompted the agency to implement hard drive and USB memory stick encryption systems across all PCs.	[34]
2007	November	Foreign and Commonwealth Office	50,000	Details of visa applicants were made available on an FCO website.	[35]
2007	November	HM Revenue and Customs	25,000,000	Two CDs containing details of the families of child benefits claimants went missing in the post. HMRC's handling of data was described as "woefully inadequate" and staff were described as "muddling through" in a June 2008 Independent Police Complaints Commission report.	[36] [37] [38] [39]
2007	July	Ministry of Justice	5,000	Hard disk with details of HM Prison Service staff is lost on the premises of EDS.	[40]
2007	May	Driving Standards Agency	3,000,000	Hard disk with details of candidates for the driving theory test was lost in a premises in Iowa by subcontractors.	[41]
2007	May	Foreign and Commonwealth Office	50	Details of individuals made public after "unauthorised disclosure by a contractor"	[42]
1961		Foreign Office		Many of the most sensitive documents from the UK's colonial era were destroyed under the direction of Secretary of State for the Colonies Iain Macleod.	[43]