Banking giant HSBC says it has lost a computer disc containing details of nearly 400,000 customers. The disc contains the names, dates of birth and insurance cover levels of 370,000 people who hold life assurance policies at the bank.
It does not contain addresses or bank account details, HSBC said. 'The data disk lost by HSBC contains no address or bank account details for any customer and would therefore be of very limited, if any, use to criminals,' it said in a statement.
The data was password-protected, it added.
The disc went missing, it said, after being sent via Royal Mail courier from the group's offices in Southampton to the reinsurer Swiss Re at the beginning of February. It is not clear at what stage of the journey the disc went missing.
Normally such information is passed by secure wire link, but it was not working on the day the disc was sent. HSBC said the reinsurer is carrying out a thorough search.
The bank has informed the UK watchdog, the Financial Services Authority, which may carry out an investigation. If it finds HSBC guilty of lax security, it could face a fine.
Norwich Union Life, one of the UK's largest life insurers, was fined £1.26m sterling by the FSA last December for exposing its customers to the risk of fraud.
Weaknesses in its systems and controls allowed fraudsters to impersonate customers and obtain sensitive details from its call centres. In some cases, they changed addresses and bank account details, helping them to then cash in policies totalling £3.3m last year.