






It was reported today that the identities of potentially thousands of Department of Works and Pensions employees have been stolen in the latest identity theft attack to hit Her Majesty's Customs and Excise.
The stolen identities have been used by criminals to access and claim benefits from the coffers of the government's tax credits website which has been forced to shut down because of the major fraud.
This vulnerability is a salutary warning to organisations who deal with sensitive and confidential information on behalf of others, to the dangers and legal implications of handling that information. It is vital that organisations understand their obligations to keep personal data secure, failing which they may be liable for hefty fines or even awards for damages under the Data Protection Act and other remedies.
| January 2006 | November 2005 |