© Copyright Acquisition International 2025 - All Rights Reserved.

Article Image - HMRC under fire for 11 ‘serious’ personal data breaches affecting over 20,000 people
Posted 9th December 2020

HMRC under fire for 11 ‘serious’ personal data breaches affecting over 20,000 people

Law firm accuses taxman of ‘breath-taking incompetence’ over catalogue of data loss incidents affecting tens of thousands of members of the public.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

HMRC under fire for 11 ‘serious’ personal data breaches affecting over 20,000 people
data breach

HM Revenue and Customs (HMRC) has reported 11 ‘serious’ personal data incidents to the Information Commissioner’s Office (ICO) in the most recent financial year, according to official figures.

The incidents, disclosed in HMRC’s newly published annual report, are estimated to have affected 23,173 people in total and have been analysed by litigation practice Griffin Law.

The most widespread and serious personal data incident recorded in the report happened in May this year at the height of lockdown, when National Insurance number letters relating to 16-year-old children were sent out with incorrect details, impacting up to 18,864 members of the public.

However, the most severe incident occurred in February 2020, when a fraudulent attack resulted in 64 employees’ details being obtained from three PAYE schemes. Name, contact details and ID data, such as passwords and usernames, were leaked, and an estimated 573 people are said to have been impacted as a result.

According to the report, which was released on the 5th of November, the affected customers had not yet been contacted, but the incident is still under investigation.

Other data incidents documented by HMRC in their annual report include a cyber attack against an agent and their client data, affecting 25 people; an incorrectly accessed tax payer record, and resulting refund to the taxpayer’s mother; leak of addresses and property details due to usage of the incorrect Excel spreadsheet, and, leak of medical documents, private correspondence and company data due to paperwork being left on a train.

A further 3,616 ‘centrally managed’ security incidents were also recorded; however specific details of these incidents were not revealed.

HMRC stated the following in the report: “We deal with millions of customers every year and tens of millions of paper and electronic interactions. We take the issue of data security extremely seriously and continually look to improve the security of customer information. We investigate and analyse all security incidents to understand and reduce security and information risk. We actively learn and act on our incidents. For example, by making changes to business processes relating to post moving throughout HMRC and undertaking assurance work with third party service providers to ensure that agreed processes are being carried out.”

 

Cyber security expert Tim Sadler, CEO, Tessian commented:

“Human error is the leading cause of data breaches today. And given that people are in control of more data than ever before, it’s also not that surprising that security incidents caused by human error are rising. 

“That’s not to say, though, that people are the weakest link when it comes to data security. Mistakes happen – it’s human nature – but sometimes these mistakes can expose data and cause significant reputational and financial damage. It’s an organisation’s responsibility, then, to ensure that solutions are put in place to prevent mistakes that compromise cybersecurity from happening – alerting people to their errors before they do something they regret.” 

 

Donal Blaney, principle, Griffin Law added:

“Taxpayers have a right to expect their sensitive personal data to kept secure by the taxman. The Information Commissioner should immediately investigate HMRC for these breaches and hold the taxman to account for this breathtakingly incompetence”.

Categories: Legal


You Might Also Like
Read Full PostRead - Eye Icon
Key Player in the Philippine Legal Industry
Legal
20/03/2019Key Player in the Philippine Legal Industry

MOSVELDTT Law Offices is full-service firm grounded on legal competence and distinguished by their uncompromising work ethic. Recently, the firm found success in AI’s Global Excellence Awards 2019. On the back of their win, we profiled the firm and spoke to

Read Full PostRead - Eye Icon
Dispute Resolution
Legal
09/06/2016Dispute Resolution

The firm mainly acts in aviation law, commercial law, product liability and in criminal matters. Its founder previously worked as a lawyer of English and American law firms based in Paris and in London.

Read Full PostRead - Eye Icon
Most Innovative Law Firm of 2016, Germany
Innovation
04/04/2016Most Innovative Law Firm of 2016, Germany

Wülfing Zeuner Rechel (WZR) is a German legal firm with a focus on emerging markets and a dedication to client service.

Read Full PostRead - Eye Icon
Checkers Industrial Safety Products Acquisition of Superior Manufacturing Group
M&A
28/04/2016Checkers Industrial Safety Products Acquisition of Superior Manufacturing Group

Superior Manufacturing Group, Inc. has grown into one of the largest integrated manufacturers of floor matting products in the world. Superior Manufacturing Group, Inc. is a market leader in mats for professional use under the brand Notrax® and can be found i

Read Full PostRead - Eye Icon
Renewables:The Fastest Growing Energy Sector of 2015
Finance
28/10/2015Renewables:The Fastest Growing Energy Sector of 2015

The market for renewable energy in Europe is increasing rapidly, The EU is working to reduce the effects of climate change and establish a common energy policy.

Read Full PostRead - Eye Icon
What are the Alternatives to Small Business Loans?
News
28/04/2023What are the Alternatives to Small Business Loans?

Small business loans are a type of financing designed to provide financial assistance to small businesses. These loans can be used to cover various business expenses, such as purchasing equipment and inventory, or expanding the business.

Read Full PostRead - Eye Icon
APC Technology Group Acquisition of EEVS Insight Ltd
Innovation
04/08/2015APC Technology Group Acquisition of EEVS Insight Ltd

APC Technology Group Acquisition of EEVS Insight Ltd

Read Full PostRead - Eye Icon
What is Compliance and Why is It Important for Business?
Legal
12/08/2021What is Compliance and Why is It Important for Business?

When you go into business, you are very likely to quickly encounter the word “compliance”. This is something that you are going to have to follow extremely closely, no matter what. Compliance in business is something that just can’t be ignored. Let’s t

Read Full PostRead - Eye Icon
Apex Insurance Services
Strategy
13/04/2015Apex Insurance Services

Established in 1957, Apex Insurance Services are a local Insurance Broker for local people, with traditional broking values. We spoke to them about how they offer a fast, reliable face-to-face personal service.



Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have a number of unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.

Arrow