EDS, an MOD IT contractor, has reported that it can not identify the whereabouts of a portable hard disk drive.
The device had been used with the TAFMIS recruitment system and may, in the worst case, contain details relating to individuals who have either expressed an interest or applied to join the Armed Forces.
An investigation is being conducted by the MOD Police and EDS, and it is still hoped that the item can be located at another secure site.
There is no indication that the data, if indeed it has fallen into unauthorised hands, has been exploited maliciously in any way; but it is possible that personal information on anyone serving or who has served in recent years in the Armed Forces may have been compromised.
But we would emphasise that our assessment of the risk of misuse of this data is low, given the circumstances of this incident.
The information held will not be the same for every individual. In some cases, for casual enquiries, the record will be no more than a name and contact details.
But, for those who progressed as far as submitting an application to join the Forces, more extensive personal data may be held, including passport details, National Insurance numbers, drivers’ licence details, family details, doctors’ addresses and National Health Service numbers.
With regard to those individuals for whom financial details may have been held on the database, the MOD is taking action, through APACS (the Association for Payment Clearing Services), to inform banks so that relevant accounts can be flagged for scrutiny against unauthorised access.
Anyone concerned that they may have been on the database can get in touch via email – recruitdata@check.mod.uk – or via a helpline (0800 121 6213). For those phoning from overseas, the number is +44 (0) 207 353 9111.
This will be available from 1000 to 1600 on Saturday 11 and Sunday 12 October, and 0900 to1700 during the normal working week thereafter.