International examples of data losses

Apart from the Irish examples of data loss there are also numerous cases of data loss from countries such as the United States and the UK. The reason that there are so many more examples is due to the fact there is some level of mandatory reporting in both countries.

United Kingdom
In the UK the Response to the Data Sharing Review Report issued in Nov 2008 it was decided not to introduce a compulsory data-breach notification law for private-sector organisations. The report states that it iss already mandatory for public-sector organisations to report any significant actual or potential losses of data to the Information Commissioner's Office (ICO). Private-sector organisations should report data breaches "as a matter of good practice",

The ICO should take into account of any lack of reporting by a private-sector organisation in its enforcement action. Fines for companies that are found in breach of data-protection laws are to be raised, states the report. The Ministry of Justice is working with the ICO to determine the level of the maximum fine.

As a result there are many examples of data losses listed for the UK. The most high profile incidents include:

• Loss of 25 million child benefit records
• Ministry of Defence (MOD)  - 658 laptops stolen, 89 laptops & 121 USB memory sticks lost in 4 year period.
• Cabinet Minister loses confidential documents on train
• Details of 3 million L-Drivers lost

Click here for a more comprehensive listing

United States

In 2003 California a law was enacted that makes it mandatory for companies to warn customers whose data has been compromised. Its introduction has been very successful and has led to the majority of other states enacting similar laws.

Main benefits of mandatory reporting :

• It enables individuals to take proactive action to protect themselves from theft or fraud once they are aware a data loss has occurred
• In order to avoid negative publicity, companies are increasing their security measures and providing adequate training staff to ensure that they are aware of their responsibilities when it comes to protecting data
• If customers believe that a company doesn’t take its responsibility to protect their data seriously enough, then they can change companies.

Some high profile data losses in the U.S. are:

• Heartland Payment Systems hacked – 130 million records stolen
• TJ Maxx – 45 million credit and debit cards numbers stolen
• Department of Veteran Affairs – stolen laptop contains details on 26.5 million veterans

Click here for a day by day listing of reported data losses in throughout the world and see how commonplace and easily personal information is lost or unaccounted for.