Page last updated at 19:51 GMT, Tuesday, 20 November 2007

UK's families put on fraud alert

Alistair Darling
The chancellor urged people to monitor their bank accounts

Two computer discs holding the personal details of all families in the UK with a child under 16 have gone missing.

The Child Benefit data on them includes name, address, date of birth, National Insurance number and, where relevant, bank details of 25 million people.

Chancellor Alistair Darling said there was no evidence the data had gone to criminals - but urged people to monitor bank accounts "for unusual activity".

The Conservatives described the incident as a "catastrophic" failure.

0845 302 1444

In an emergency statement to MPs, Mr Darling apologised for what he described as an "extremely serious failure on the part of HMRC to protect sensitive personal data entrusted to it in breach of its own guidelines".

MPs gasped as Mr Darling told them: "The missing information contains details of all Child Benefit recipients: records for 25 million individuals and 7.25 million families. "

Police at HMRC Tyne and Wear
The police are not aware of any evidence that it has been used for fraudulent purposes or criminal activity
Alistair Darling

The chancellor blamed mistakes by junior officials at HMRC, who he said had ignored security procedures when they sent information to the National Audit Office (NAO) for auditing.

Mr Darling told MPs: "Two password protected discs containing a full copy of HMRC's entire data in relation to the payment of child benefit was sent to the NAO, by HMRC's internal post system operated by the courier TNT.

The package was not recorded or registered. It appears the data has failed to reach the addressee in the NAO."

He added: "The police tell me that they have no reason to believe that this data has found its way into the wrong hands.

"The police are not aware of any evidence that it has been used for fraudulent purposes or criminal activity."

Fraud protection

The HMRC has set up a Child Benefit Helpline on 0845 302 1444 for customers who want more details.

The data was sent on 18 October and senior management at HMRC were told it was missing on 8 November and the chancellor on 10 November.

National insurance number
Name, address and birth date
Partner's details
Names, sex and age of children
Bank/savings account details

Mr Darling said banks were adamant that they wanted as much time to prepare for his announcement as possible.

He added: "If someone is the innocent victim of fraud as a result of this incident, people can be assured they have protection under the Banking Code so they will not suffer any financial loss as a result."

Mr Darling said people should monitor their accounts "for any unusual activity".

Chairman resigns

The Metropolitan Police are investigating the disappearance of the two discs and the Independent Police Complaints Commission (IPCC), which monitors HMRC, is investigating the security breach.

Uniformed officers were earlier checking HMRC's offices in Washington, Tyne and Wear.

It is the latest and by far the most serious of a string of missing data incidents at HM Revenue and Customs.

Check your bank statements for odd transactions
Monitor your account if you bank online
Change your account password if it is a date of birth or name
Source: Apacs

HMRC chairman Paul Gray resigned earlier after the latest incident came to light.

Shadow Chancellor George Osborne said: "Let us be clear about the scale of this catastrophic mistake - the names, the addresses and the dates of birth of every child in the country are sitting on two computer discs that are apparently lost in the post, and the bank account details and National Insurance numbers of 10 million parents, guardians and carers have gone missing.

"Half the country will be very anxious about the safety of their family and the security and the whole country will be wondering how on earth the government allowed this to happen."

'Ancient' computers

He urged the government to "get a grip" and said it was the "final blow for the ambitions of this government to create a national ID database" as "they simply can not be trusted with people's personal information".

Liberal Democrat Acting Leader Vince Cable said it was now the Treasury and not the Home Office that was "not fit for purpose".

Part of child benefit form
Available to the parents, normally mother, of every child in UK under 16
Older children in full-time education still eligible
Taken up by almost 100%
It amounts to 18.10 a week for a first-born child
For subsequent children - it amounts to 12.10 a week

"Why does HMRC still use CDs for data transmission in this day and age? The ancient museum pieces it is currently using for computing must be replaced.

"After this disaster how can the public possibly have confidence in the vast centralised databases needed for the compulsory ID card scheme.

"Where does the buck stop after this catalogue of disasters?"

Giving his reaction, the Information Commissioner, Richard Thomas, said: "This is an extremely serious and disturbing security breach."

Mr Thomas welcomed the Chancellor's announcement of an independent review of the incident by Kieran Poynter of PricewaterhouseCoopers and said he would decide on further action once he has received the report.

"Searching questions need to be answered about systems, procedures and human error inside both HMRC and NAO," said Mr Thomas.

The prime minister's official spokeswoman said Gordon Brown has "full confidence" in Mr Darling. She added that Mr Darling has not offered to resign.

The BBC is not responsible for the content of external internet sites

Has China's housing bubble burst?
How the world's oldest clove tree defied an empire
Why Royal Ballet principal Sergei Polunin quit


Americas Africa Europe Middle East South Asia Asia Pacific