HMRC staff who worked with sensitive data carried out duties with a ‘muddle through’ ethos, a report into the missing child benefit discs from the independent police complaints commission (IPCC) has found.
The loss of data on two discs containing the personal details of 25 million people was the result of systemic failures at Revenue and Customs, according to a review of the information security at the department.
73% resulted from external sources versus 18% from insider threats and most breaches resulted from a combination of events rather than a single hack or intrusion.