What
Loss of sensitive personal data.
How much
8,000 records.
Why
Theft of two unencrypted laptops and back up media during a burglary of premises.
Regulator
ICO
Regulatory action
Undertaking issued to ensure that physical security measures are sufficient to prevent unauthorised access to persona data and that all portable media devices must be encrypted to a suitable standard.
Reason for action
While the laptops were kept in a locked cupboard and the backup media in a safe (which was stolen) the data controller was in the process of upgrading their security to include encryption, but the theft occurred before this could be put into practice.
When
06 December 2011.
Links
View PDF of the Alan M Casson & Associates Undertaking (Via ICO Website)
View PDF of the Alan M Casson & Associates Undertaking (Breach Watch Archive)