Home Office laptop and disc up for grabs on eBay

The Home Office is investigating the apparent sale of one of its laptops, along with an encrypted data disc, on eBay.

Security from A to Z

Click on the links below to find out more...

A is for Antivirus
B is for Botnets
C is for CMA
D is for DDoS
E is for Extradition
F is for Federated identity
G is for Google
H is for Hackers
I is for IM
J is for Jaschan (Sven)
K is for Kids
L is for Love Bug
M is for Microsoft
N is for Neologisms
O is for Orange
P is for Passwords
Q is for Questions
R is for Rootkits
S is for Spyware
T is for Two-factor authentication
U is for USB sticks/devices
V is for Virus variants
W is for Wi-fi
X is for OS X
Y is for You
Z is for Zero-day

The laptop had been bought on the auction site then taken to an IT company near Manchester for repairs. The technicians at the repair centre, at Leapfrog Computers in Westhoughton, subsequently found an encrypted Home Office disc underneath the keyboard.

Leapfrog sales manager Jonathan Parry told silicon.com sister site ZDNet.co.uk that the person who had bought the laptop had brought it into the shop on Monday because "it wasn't working properly".

Parry said: "Underneath the keyboard in the laptop was a CD labelled 'Home Office: Private and Confidential'. We tested it and it was fully encrypted, and so was the laptop. We contacted [the police] and they seized the equipment."

Parry pointed out that, as optical disc drives are sealed units, "the only way that disc can get there is by taking the laptop keyboard off and putting the disc in there". He added the presence of a CD underneath the keyboard was probably linked to the laptop not working.

A Home Office spokesperson said: "We understand that encrypted IT equipment has been handed to Greater Manchester Police. Both the laptop and the disc were encrypted, thus safeguarding any information that might be stored on them. Investigations are now underway. It would be inappropriate to comment further while they are ongoing."

Security companies were quick to issue statements on the discovery. Lumension Security vice president, Alan Bentley, said: "The good news with this latest data breach is that the data was encrypted. However, encryption alone is not infallible - computer hackers are determined individuals with the potential to crack one layer of security. We certainly shouldn't be relying on one line of protection when it comes to our national security."

Brian Spector, the general manager for content protection at Workshare, said: "With the statistics showing that nearly 500 government devices have gone missing since 2001, it was only a matter of time before a confidential disc inadvertently ended up on eBay. Luckily, the public sector finally seems to be learning from repeated mistakes, as the laptop and disc were encrypted. Unfortunately accidents like this are not going to stop happening so we can only hope that other government departments follow the Home Office's lead and adopt full disc encryption."

Governmental departments have suffered a spate of laptop thefts in recent years, recently leading to a Whitehall-wide ban on the movement of unencrypted data.

Original article: Home Office laptop and disc 'bought on eBay' from ZDNet UK