British revenue agency admits losing confidential data on 25 million individuals | AccountingWEB

British revenue agency admits losing confidential data on 25 million individuals

Paul GrayPaul Gray (pictured), chairman of the British revenue agency, HMRC, has resigned after the admission that Her Majesty's Revenue and Customs has lost the confidential details of up to 25 million individuals from 7.5 million families claiming child benefits.

The Chancellor of the Exchequer, Alistair Darling MP (Member of Parliament), admitted in a statement that the data went missing when a "junior official" at HMRC sent two CD-ROMs to the National Audit Office using HMRC's internal courier, TNT. The disks contained full personal details of claimants and their children, including national insurance numbers and private bank details.

The chancellor explained that the information was sent on October 18th, but senior management at HMRC were not informed of the loss until November 5th. On November 14th, Customs officials began a search of all HMRC offices, but could not find the CDs. Darling then called in the Metropolitan Police, whose investigation is still ongoing. Advice has also been sought from the Financial Services Authority and the Serious Organised Crime Agency, as well as the Information Commissioner.

Numerous reviews are promised. Darling explained that Sir John Bourn at the National Audit Office (NAO) will look into its procedures for requesting data, and that he has asked Kieran Poynter, chair of PricewaterhouseCoopers, to issue an interim report on the incident next month followed by a full version in the spring. The Independent Police Complaints Commission, which has responsibility for investigating HRMC, will also be looking into the matter.

According to the Treasury, the announcement has been delayed to give Britain's banks and building societies sufficient time to safeguard the relevant accounts. Affected account holders were urged to monitor their accounts, but not to contact their actual banks or building societies. Closing their accounts was entirely unnecessary, the Chancellor said, who then went on to say there was "no evidence this information has reached the wrong hands." He also pointed out that innocent victims of fraud are protected by the banking code.

To general derision from the opposition benches, Darling also advised account holders it was important not to respond to unauthorized requests for personal information. Child benefit payments are to continue as before.

Changes have been initiated to ensure that data transmission out of HMRC now requires signed confirmation from senior management. Treasury spokesperson Vince Cable wondered why the data was transmitted via courier and not electronically. He also reminded the house of the 25,000 HMRC jobs to be cut by 2011 and its ongoing IT problems with CapGemini, and asked if the Treasury had now overtaken the Home Office as latest government department which is "no longer fit for purpose".

Cable also raised doubts as to how closely the Chancellor intends to follow the Information Commissioner's advice. When the Commissioner recommended the Treasury publish the Gateway Review, which looked into the value offered by private finance initiatives (PFIs), the department decided instead to suppress the findings in the high court.

"Private finance contractors have been given greater data protection than families," Cable said.

Another angry voice belonged to Edward Leigh, chairman of the Public Accounts Committee, who said the Chancellor had not only maligned the NAO and misled the house, but was also to blame for "criminally irresponsible behavior on that part of a department that once had an impeccable reputation."

When the NAO originally requested the information from HMRC, Leigh said, Sir John Bourn had asked for national insurance numbers only, and had specifically asked for all other information to be removed. In contrast to Darling's statement that senior management at HMRC were not made aware of the data loss until the November 5th, Leigh pointed out that the NAO informed HMRC of the missing information on the 24th of October.

The Chancellor repeated his understanding that senior management at HMRC were not informed until the 5th, but nevertheless added he "had no reason to criticize the NAO at all". He expressed hope that Kieran Poynter's review might "reconcile different opinions of what happened."

The scandal will not come as a surprise to many in Westminster. Conservative MP Michael Fallon, vice-chairman of the Treasury select committee, said earlier there had been "persistent rumors that all is not well at Revenue and Customs." This month HMRC has already admitted to losing a CD containing the names, national insurance numbers, and dates of birth of 15,000 Standard Life pension holders. A laptop containing 2,000 individuals' ISA details was also stolen from an employee's car.

Paul Gray became Chairman of HMRC after Sir David Varney moved to the Treasury in February. In a letter sent to HMRC staff he said he was resigning after "a substantial operational failure."

"This is not the way I would have planned to organise my departure," the letter read. "I had hoped to be around a while longer, and to have had the continuing privilege of leading HMRC towards the vision we have been developing. But I am extremely proud of what all of you in the organisation have achieved during my time as deputy chairman and chairman."

Fallon said he assumed Gray's resignation was "a matter of honor. It is a good example and should be followed more widely."

This article originally appeared on our sister site,

Related articles
Dave Hartnett chosen as acting HMRC chairman
HMRC data security lapses - the final straw
Stewart Twynham's IT security diary - The tip of the iceberg

Bloggers crew

Steve Knowles has spent 25 years in business and practice in the UK, but he also worked in the states and the years haven't dulled his way of seeing an alternative view to everyone else, and every day is a new adventure.


Joel M. Ungar, CPA is a lifelong resident of the Detroit area and a graduate of The University of Michigan. He is a principal with Silberstein Ungar, PLLC, a Top 15 auditor of SEC public reporting companies.


Allan Boress, CPA, with over 25 years as a practitioner and consultant to the accounting profession. Mr. Boress is the author of 12 published books in 6 different languages, including a best-seller, The "I-Hate-Selling" Book.


Larry Perry, CPA, CPA Firm Support Services, LLC, is the author of accounting and auditing manuals, author and presenter of live staff training seminars, and author of webcast and self-study CPE programs. He blogs about small audits, reviews, and compilations.

Sandra Wiley, COO and Shareholder, is ranked by Accounting Today as one of the 100 Most Influential People in Accounting as a result of her prominent role as an industry expert on HR and training as well as influence as a management and planning consultant. She is also a founding member of The CPA Consultant's Alliance. Sandra is a certified Kolbe™ trainer who advises firms on building balanced teams, managing employee conflict and hiring staff.

Maria Calabrese, CIR, Human Resources manager for Fazio, Mannuzza, Roche, Tankel, LaPilusa, LLC in Cranford, New Jersey, Maria's topics revolve around the world of: Mentoring, Performance management, and The "Y Generation," a.k.a. "The whY generation".


William Brighenti is a CPA, Certified QuickBooks ProAdvisor, and Certified [Business] Valuation Analyst, operating an accounting, tax, and QuickBooks consulting firm in Hartford, Connecticut, Accountants CPA Hartford.


Ken Garen, CPA, is the co-founder and President of Universal Business Computing Company (, a software development firm of high-volume, high-productivity accounting and payroll technology.


Eva Rosenberg, MBA, EA, is the publisher of, and author of the weekly syndicated Ask TaxMama column. She provides answers to tax questions from taxpayers and tax professionals worldwide.


Amy Vetter, CPA, CITP is the CPA Programs Leader for Intacct Corporation responsible for leading the CPA/BPO Partners nationally.

Brian Strahle is the owner of LEVERAGE SALT, LLC where he provides state and local tax technical services to accounting firms, law firms and tax research organizations across the United States. He also writes a weekly column in Tax Analysts State tax Notes entitled, "The SALT Effect." For more info, visit his website:
Scott H. Cytron, ABC, is president of Cytron and Company, known for helping companies and organizations improve their bottom line through a hybrid of strategic public relations, communications, marketing programs and top-notch client service. An accredited consultant, Scott works with companies, organizations and individuals in professional services (accounting, finance, medical, legal, engineering), high-tech and B2B/B2C product/service sales.

Rita Keller is a nationally known CPA firm management consultant, speaker, author, mentor and blogger. She has over 30 years hands-on experience in CPA firm management, marketing, technology and administrative operations.

Stacy Kildal is the mom of two fantastic kids, an Advanced Certified QuickBooks ProAdvisor, Certified Enterprise Solutions ProAdvisor, Sleeter Group Certified Consultant, a nationally recognized member of the Intuit Trainer and Writer Network, and co-host of RadioFree QuickBooks.
Michael Alter's blog specializes in providing practical advice to those who seek greater profitability and practice management tactics that enhance deeper client relationships.

Sally Glick, CMO, Principal, Marketer of the Year in 2003 and AAM Hall of Famer in 2007, leads a lively discussion of the constantly expanding roles of marketing and the professional marketers that drive this initiative in accounting firms of all sizes.


The IMA Young Professionals Blog features the insights of IMA’s Young Professionals Committee. Committee members share advice and experiences on careers, continuing education, work/life balance, and other issues affecting young accounting and finance professionals.


FEI Financial Reporting Blog provides highlights from SEC, PCAOB, FASB, IASB, and other regulatory news, including reporting under Sarbanes-Oxley Sect 404. It is written by Edith Orenstein, Director of Technical Policy Analysis at FEI.


Sue Anderson has 30 years of experience in continuing education for accountants. Currently she is the program director for online CPE provider CPE Link.


Jim Fahey is COO of Apple Growth Partners, a regional CPA firm in Ohio. His focus is on the effective and efficient use of technology within the firm by all team members.

Caleb Newquist is the Editor-in-Chief of Sift Media US, overseeing content for both AccountingWEB and Going Concern.

Leita Hart-Fanta, CPA, CGFM, and CGAP is the author of "The Yellow Book Interpreted" and owner of a website devoted to training for governmental auditors.


AccountingWEB is more than just a U.S. team of journalists and financial and technology experts - we have an international side, too! Members of our British team who publish share their ideas, insights, and perspectives from across the pond.