Building society on alert after laptop theft

Yorkshire Building Society said today that it was taking steps to improve its data security after an unencrypted laptop containing customers' details was stolen.

The laptop, which contained a substantial part of Chelsea Building Society's customer database, was stolen from the group's office in Cheltenham, Gloucestershire, on April 19 this year, shortly after the two mutuals had merged.



It was recovered within 48 hours after Yorkshire hired private investigators to assist police in tracking it down.



Forensic computer experts said none of the data on the computer had been accessed during the time it was missing, although there had been several attempts to do so.



The laptop had been used by a Chelsea employee who was working from home. The worker returned it to a manager, who then returned it to Chelsea's former head office in Cheltenham.



It was later discovered that the manager had written down the passwords to the computer and left them in a bag with the laptop under a desk overnight.



The Information Commissioner's Office (ICO) said today that it had found Yorkshire Building Society in breach of the Data Protection Act over the incident.



Mick Gorrill, head of enforcement at the ICO, said: "It is extremely concerning that an unencrypted laptop containing large amounts of personal data was left unsecured overnight, together with details of its passwords.



"What's more, the fact that the employee did not require all the information to carry out the task in hand created an unnecessary risk which could easily have been avoided."



But he added that Yorkshire had taken "prompt and effective action" to prevent a similar incident happening again.



Yorkshire said the incident happened shortly after it had completed its merger with the Chelsea on April 1, when it was still rolling out its "more rigorous security procedures" to the society.



The group has agreed to take a number of steps to improve its data security, including that all portable devices, such as laptops, are encrypted, a measure which is already in place at the Yorkshire, and that all staff are aware of the company's policies for the storage and use of personal data.



Staff will also only be given access to the type and amount of personal data necessary for their work.



A Yorkshire Building Society spokeswoman said: "Yorkshire Building Society takes its duty of care to its members very seriously and was in the process of rolling out the Yorkshire's more rigorous security procedures to the Chelsea at the time of the theft.



"The society took immediate and appropriate remedial action and, as the Information Commissioner's Office has acknowledged, there has been a full review of data security with new safeguards put in place to prevent a repeat of this incident."



Earlier this week Zurich Insurance was fined £2.28 million by the Financial Services Authority after losing personal details on 46,000 policyholders.



The data loss occurred in August 2008 when the South African branch of the company lost an unencrypted back-up tape during a routine transfer to a data storage centre, but Zurich UK did not learn about the incident until a year later.



The regulator has previously fined Nationwide £980,000 for data security failings after a laptop containing customer details was stolen from an employee's home.

Start your day with The Independent, sign up for daily news emails
Latest stories from i100
Have you tried new the Independent Digital Edition apps?

Day In a Page

Raif Badawi: Wife pleads for fresh EU help as Saudi blogger's health worsens

Please save my husband

As the health of blogger Raif Badawi worsens in prison, his wife urges EU governments to put pressure on the Saudi Arabian royal family to allow her husband to join his family in Canada
Birthplace of Arab Spring in turmoil as angry Tunisians stage massive sit-in over lack of development

They shall not be moved: jobless protesters bring Tunisia to a halt

A former North African boom town is wasting away while its unemployed citizens stick steadfastly to their sit-in
David Hasselhoff's new show 'Hoff the Record': What's it like working with a superstar?

Hanging with the Hoff

Working with David Hasselhoff on his new TV series was an education for Ella Smith
Can Dubai's Design District 'hipster village' attract the right type of goatee-wearing individualist?

Hipsters of Arabia

Can Dubai’s ‘creative village’ attract the right type of goatee-wearing individualist?
The cult of Roger Federer: What is it that inspires such obsessive devotion?

The cult of Roger Federer

What is it that inspires such obsessive devotion?
Kuala Lumpur's street food: Not a 'scene', more a way of life

Malaysian munchies

With new flights, the amazing street food of Kuala Lumpur just got more accessible
10 best festival beauty

Mud guards: 10 best festival beauty

Whether you're off to the Isle of Wight, Glastonbury or a local music event, we've found the products to help you
Abuse - and the hell that came afterwards

Abuse - and the hell that follows

James Rhodes on the extraordinary legal battle to publish his memoir
Why we need a 'tranquility map' of England, according to campaigners

It's oh so quiet!

The case for a 'tranquility map' of England
'Timeless fashion': It may be a paradox, but the industry loves it

'Timeless fashion'

It may be a paradox, but the industry loves it
If the West needs a bridge to the 'moderates' inside Isis, maybe we could have done with Osama bin Laden staying alive after all

Could have done with Osama bin Laden staying alive?

Robert Fisk on the Fountainheads of World Evil in 2011 - and 2015
New exhibition celebrates the evolution of swimwear

Evolution of swimwear

From bathing dresses in the twenties to modern bikinis
Sun, sex and an anthropological study: One British academic's summer of hell in Magaluf

Sun, sex and an anthropological study

One academic’s summer of hell in Magaluf