HMRC offers £20k reward for ID goldmine CDs Her Majesty's Revenue and Customs is offering a reward of £20,000 for information leading to the recovery of the lost child benefit data discs. The discs, with information on 25m people, were lost in mid-November en route from a child benefit office in Sunderland to the National Audit Office. Estimates of the potential value …
Don't you just hate it when you can't find your Windows reinstall disk and have to go through stacks of CDs to find it? Imagine doing that on the scale of several offices!!!
Maybe instead of paying the cost of 47 police officers' time to do the searching maybe they should offer a bonus to their staff to find it on one of their desks.
I wonder how long before "Her Majesty" revokes her sponsorship of Revenue and Customs?
I mean, seriously, the morons that run the place have surely done enough to lose their royal patronage - Some might even consider that they've brought HM's name into disrepute.
Brenda must be feeling pretty hacked off about this. Perhaps it's time she reviewed all those government operations that she ostensibly approves of - she could start by insisting that she write her own speech!
BTW, I nominate "insult, meet injury" for the best El Reg subheading of the year.
Whoever ends up with them disks could make more than £20k, every day, easy.
Planks. Utter planks. Utter clueless planks.
Yet, I suppose offering some reward looks good to the sheeple who vote for them. Baaaa.
I bet they set up a committee to decide on how big a reward to offer: big enough to look serious, but not so big as to cause a stampede to every government waste disposal site. I then go on to posit that the cost of supposed committee meetings is greater than the reward they're offering.
Yet, this reward is still less than the quoted cost of removing the data as originally requested by the NAO.
Planks.
is approximately a Billion quid (due to the sudden glut - otherwise it would have been about 8 Billion), (see http://stottle.blogspot.com/2007/11/datastrophe.html) ...
...I'd say it's extremely unlikely that the current holder of the data is going to be attracted by a trifling £20k.
>Whoever ends up with them disks could make more than £20k, every day, easy.
Yup, for the criminally minded the disks are worth a bundle, BUT the assumption is that the disks are lost, not stolen.
Think of it like finding a key in the street, do you start looking for a keyhole or an owner - chances are you just ignore it. If there is a £10 bonus you may pick it up and try to find owner. This is just a way of encouraging civil servants to do the work they are paied to do without all that "yes minister" carp
The government told us that the data was harmless, that identity thieves couldn't do anything useful with it. So why is it worth £20k to get them back? The government couldn't possibly have been telling us blatant lies knowing the public are far too thick to connect conflicting statements more than a week apart, could they?
I reckon the things arrived at the NAO as planned. Then (when they realised that the data wasn't "anonymised") the NAO flogged 'em to the Russian mafia to pay the last expenses claim of the Comptroller and Auditor general.
Why, because they're the NAO and they couldn't countenance paying for such extensive junketing and blatant snout to trough juxtapositioning directly from the public purse now, could they?
So, HMRC were too tight fisted to pay 5 grand to filter the data, but can now find 20 grand to waste on getting these discs returned.
I presume they've already reserved the services of a forensic lab to analyse the burn signature on the returned discs to make sure no one tries to defraud HMRC of said 20 grand ?
Or is this just a LOB ?
1. start shell
dd if=/dev/urandom of=/tmp/secretdatabase.db bs=2048 count=24000000
dd if=/dev/urandom of=/tmp/secretdatabase2.db bs=2048 count=24000000
2. use k3b
3. burn to CDR
4. label disk "HMRC benefits", put in envelope matching the description, write on address, wrap and send to the hotline and claim reward
5. profit!
so easy Paris could do it!
According to today's Telegraph, things have managed to get even worse for the government.
Amongst the names on the disks are the original and new names of several hundred police witnesses to serious crimes who have been given new identities and addresses after testifying. All of them will now need to be moved again and given new identities. The costs? Unimaginable, let alone the real fear these people will be in.
http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2007/12/05/ndata105.xml
I am stunned that no one has been fired for incompetence - surely the Revenue had people nominated under the DPA to administer personal information. They've clearly failed in their jobs and should be out of a job. If I was as casual with personal data as the Revenue I would have been sacked long ago.
What pisses me off most about that bunch of <censored> is that they are still running around trying to locate the disks instead of getting on with addressing the HUGE risk they've created.
Whoever is managing this can't have an IQ much over room temperature.
No sane civil servant is going to claim this.
Even if someone did find the disks down the back of a filing cabinet, any claim would be accompanied by the plod trying to be smart for once and suggesting that the individual had copied the disks, stole them originally, etc.
There is no way that £20k is worth the hassle and permanent black mark on their record. Best bet would be to destroy and walk away whistling. That's almost certainly what has already happened.
And as for someone who did acquire these disks for shady purposes, its not even close to the right order of magnitude.
"Well North of £20 000" ???
Since the South is where all the rich fatcats live, whereas you can buy a house in the North and have change from £100 000 (or a pint of beer and have change from £3), surely "North of £20 000" would mean *less* than £20 000?
Anyway, how will The Authorities know that the discs handed in are the only copies? I mean, it's not hard to do something like
# cdrdao read-cd --datafile disc1.dat disc1.toc && eject
# cdrdao write disc1.toc && eject
# cdrdao read-cd --datafile disc1.dat disc1.toc && eject
# cdrdao write disc1.toc && eject
is it? Or have I just given away information which could be useful to terrorists?
Sympathetic though I am to young Mr Cable's politics, I think he's made a bit of an arse of himself on this one. An identity may be worth £60 *today*, in a world where stolen IDs are quite rare. In a world where half the population have been exposed, I'd say the going rate for a single ID would be approximately zero.
It's pretty basic supply and demand economics, Vince. It's a bit worrying that you have failed to grasp this. To be fair, it is equally worrying that the two men your remarks were aimed at failed to spot this. One of them is running the nation's finances and the other had been doing so for ten years. Is there an economist in the House?
If this were a ship lost at sea that had been salvaged, the reward would be substantial.
Whilst there is no fixed percentage, Salvage arbitration awards have ranged from 25% of the value of recovered goods in small cases down to 1% in the case of larger vessels. Even accepting the lower percentage figure, recovery of the disks should carry a reward of about £15million, given the estimated £1.5billion value of the data on the black market (possibly even more to a telemarketing company!). £20k is just poxy. Even given the fact that no risk is involved, the government should recognise that it is in its interest to get them back, so offer a very worthwhile reward.
Imagine if you found them in the street and tried to return them. As people have said, it'd be trivial to make your own copy and thus the police would assume you had. You'd get your house turned over and your computers confiscated and searched. Then they'd find some reason why you weren't worthy of the £20k anyway. If you find them, just cut them up and throw them away somewhere.
That's a good point actually, I didn't think of that.... with the profile of these things there's no way that you're going to be able to get out of the cavity search and conversation of anything electrical.
So it's £20k for allowing the MET to put a thumb up your arse.
As shareholders in UK plc, let's vote to off-shore our government, or pay them what they're worth.
Being a generous chap, I'd offer them a small amount of productivity-related-pay, just so they have something to lose by screwing things up for the rest of us.
I'm sure there are a few folk who've served their apprenticeship while they were colonies. In the way G Ramsay employs head chefs to cover the restaurants he's not actually in, I'd recommend any cabinet includes lots of people boasting10+ years "working for W Churchill".
Just imagine it:
"Dear person who recoverered our embarrasing lost data and saved our skins; enclosed is the monetary reward we promised":
A cheque for £8,670
That's £20,000 minus 40% PAYE,
Minus NIC employers and employee's contributions (we have classified you as an employee for tax purposes as you were essentially working for us in finding the missing data)
Minus CGT - as you didn't really do much work in finding the disks, plus the asset concerned was someone else's intellectual property upon which you have profited by reselling it back to the original owners.
Minus 17.5% VAT; we have taken the liberty of registering you for VAT, in case you fancy having a go at recovering all the other personal data we've lost; which would put your turnover over the VAT registration threshold.
Total deductions: £11,330. Total takehome: £8,670
Kind regards and thanks again.
Yours
HMRC
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
