Firm regret sending USB stick with customers details in post

[TrueBlueTerrier]

Firm regrets sending USB stick with customers' details in post

http://newarkadvertiser.co.uk/articles/ ... -customers" onclick="window.open(this.href);return false;

A company says it regrets sending customers’ bank details through the post after a data stick carrying the information was lost by Royal Mail, despite being sent by recorded delivery.

Mole Trading Ltd, which runs Mole Country Stores, on Maltkiln Lane, Newark, sent a USB stick containing information about customers to its software provider.

It was subsequently lost in the post, despite being sent by Royal Mail’s first class signed for service, which gives proof of delivery including a signature from the receiver.

Customers of about 20 branches nationwide have been affected.

The USB stick contains information such as customers’ names, email addresses, telephone numbers, bank account numbers, sort codes, payment types and transaction history.

It does not contain credit card or direct debit details.

Mr Andrew Chapple, group company secretary of Mole Valley Farmers Group, of which Mole Trading Ltd is a subsidiary, said in a letter to customers it was highly unlikely that the information on the USB could be used for fraudulent purposes.

But Mr Chapple told the Advertiser he was worried about the information ending up in the wrong hands.

“A decision was made to send this data by the post but it was inappropriate and we regret doing it,” he said.

“Every member of the group has had an email indicating and referencing the strict procedures we have about handling data.

“We have contacted the Royal Mail at the highest level and they are investigating it fully.

“We have made all our customers aware as we felt that was the responsible thing to do.”

Mr Chapple said the indications were that the stick had been lost in the postal system, rather than it being stolen.

The company has notified the data security breach to the Information Commissioner’s Office. The office is the UK’s data privacy watchdog. It can fine organisations up to £500,000 for serious data breaches.

A Royal Mail spokesman said: “We apologise to the customer if our service has let them down.

“Any customer posting highly important information or anything of high value should use our special delivery service, which is fully guaranteed and trackable throughout every stage of our process.

“First Class Recorded is a normal first-class service with a signature only on delivery.”

[Nigel1505]

Recorded means nothing, doesn't mean it will arrive.

[aiden01]

Recorded means nothing, doesn't mean it will arrive.

neither does sd you pay for it and hope it gets delivered

[ganda]

which gives proof of delivery including a signature from the receiver

Yer right...... that "receiver" may live across the road, or further up the street, highly secure.

[Surreypostie]

Very silly thing to do, if the ICO has got hold of this serious data breach they could be fined half a million quid.