ATO security blunder sparks review
Thursday, 30 October 2008 12:15pm
The Australian Tax Office (ATO) is issuing more than 3,000 self managed super fund (SMSF) trustees with new tax file numbers and reviewing its security measures after it lost a CD containing highly sensitive trustee information.
The tax file numbers of 3,122 SMSF trustees were scanned on to a CD which was meant to be delivered to the ATO by a courier. Although the courier received the CD, it was not delivered to the ATO.
As a result, tax commissioner, Michael D'Ascenzo is urging trustees who receive a letter to take on the new tax file number to ensure their details are protected.
There is no evidence the information has been misused, but the ATO is taking the matter seriously, he said.
"I am concerned that this parcel containing taxpayer information has failed to be delivered even though the courier believes the parcel is still within their warehouse facility," said D'Ascenzo.
"As there is a risk the information could be misused if the courier is unable to locate the CD, we are providing the relevant trustees the opportunity to ensure there is no unauthorized use of their funds' relevant tax records."
According to an ATO spokesperson, this type of incident has not happened before and they are reviewing the office's handling procedures. This review will possibly include encrypting sensitive information.
A recent Symantec report found one of the biggest causes of data loss is human error and losing portable storage devices like laptops or USB drives.
Michael Hobbs
