Missing GCHQ Storage Media
The UK’s Investigatory Powers Commissioner’s Office has flagged a very significant number of General Communications Headquarters storage drives that have been missing for years and have yet to be found. According to reports, the lost storage media have been known to officials for years, but the agency remains unsure about the exact scope of the problem.
Investigatory powers commissioner Lord Brian Leveson wrote in a report that he remains concerned the agency has not yet established a sufficiently clear understanding of the scale, location, and recoverability of lost removable media that may contain sensitive data. The report emphasizes that the passage of time without a comprehensive account highlights the need for sustained senior focus and assured remediation.
Agency Response and Tracking Upgrades
GCHQ acknowledged that the tracking system for its removable media had been insufficient, but stated it has taken steps to prevent future incidents. Officials noted that the findings in the report have been addressed comprehensively. The agency has launched a program to locate as many of the lost storage media as possible and plans to deploy an automated asset-tracking system before 2027.
As the UK’s primary signals intelligence and cybersecurity agency, GCHQ operates under the legal framework of the Investigatory Powers Act passed in 2016. While officials have not confirmed the exact contents of the missing drives, the media could potentially include operational and administrative information.
Broader Government Security Blunders
Government technology blunders extend beyond this recent finding. Past reports indicate that Britain’s Ministry of Defence lost dozens of classified USB drives over a five-year period, and police forces have experienced losses of assigned technology gadgets. Other international governments have also faced major data management failures, including significant data losses resulting from unbacked infrastructure damage.
