Endpoint/Device Security, Critical Infrastructure Security, Government security

GCHQ faces scrutiny over lost storage drives and data handling failures

The abstract image of inside of hard disk drive and binary code hologram on top. the concept of data, hardware, and information technology.

The Government Communications Headquarters is facing significant criticism after an annual report revealed that thousands of storage drives containing sensitive information have been lost for years, with further coverage provided by The Register.

The Investigatory Powers Commissioner’s Office report highlights that the signals intelligence agency cannot account for a significant number of removable media devices, potentially containing data protected under the Investigatory Powers Act. Investigatory Powers Commissioner Lord Brian Leveson expressed concern that the agency still lacks a clear understanding of the scale and location of the missing hardware. While GCHQ has initiated a program to improve asset tracking, the failure to secure sensitive material persists as a long-standing issue. Beyond the lost drives, the report identifies flaws in how international partners access bulk-intercepted data and details a software bug that led to the wrongful detention of individuals under the Terrorism Act. Additionally, the report criticizes MI5 for its handling of an informant known as Agent X, noting that the agency provided false evidence to the High Court. These incidents underscore broader systemic challenges within the United Kingdom intelligence community regarding data governance, oversight of international partnerships and the ethical management of informants, raising questions about the adequacy of current security protocols.

Source: The Register

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds