Yet another data loss

David Hansen ukcrypto at chiark.greenend.org.uk
Fri, 18 Jul 2008 14:54:45 +0100


<http://news.bbc.co.uk/1/hi/scotland/tayside_and_central/7513602.stm> 
is about the loss of yet another computer, reputedly with "only" data 
on 89 patients.

It appears that news of this has not been made public before, it was 
stolen last month.

I don't know whether to be very angry or highly amused by the following 
bit:

"The health authority said the laptop was kept in a locked cupboard and 
was password-protected. [snip]

"The authority said the risk of the information being accessed by the 
thieves was "very low"."

I say that, if that is the case, NHS Forth Valley don't have a clue 
what they are talking about. When I take over running everything and 
make things better the person who uttered that prattle will be amongst 
those lined up against the wall for some "re-education":-)


When some bod lost a memory stick a few weeks ago we were told that 
they were "experienced and resepected". Experienced in what? Respected 
by whom, for what? I have no opinion on their medical virtues, but 
someone who carries information round on a(n unencrypted) memory stick 
is certainly not respected by me. Their experience of computer security 
appears to be zero, though they have hopefully been put through a rapid 
learing experience since the loss of the stick.
<http://news.scotsman.com/healthofthenhs/NHS-loses-patients39-
records.4251351.jp>


These are examples of the results which were predicted years ago by 
those of us opposed to the government war on encryption.





-- 
  David Hansen, Edinburgh 
 I will *always* explain revoked encryption keys, unless RIP prevents 
me   
http://www.opsi.gov.uk/acts/acts2000/00023--e.htm#54