50,000 Staff Files stolen from Innsworth
Join Date: Feb 2003
Location: Wilts
Posts: 254
Likes: 0
Received 0 Likes
on
0 Posts
RAF Police IT Specialists..!!!!
Trained by the RAF Police...!!!!
Only reason for RAF Policeman is because the Dogs aint trained to operate radios or drive police vehicles...
Maybe the dogs would get better results..
I'll be informing my Bank toot sweet this AM....
Command Handbrake House strikes again....
Bet someone gets promoted from this F U K up !!
yours disgusted
Trained by the RAF Police...!!!!
Only reason for RAF Policeman is because the Dogs aint trained to operate radios or drive police vehicles...
Maybe the dogs would get better results..
I'll be informing my Bank toot sweet this AM....
Command Handbrake House strikes again....
Bet someone gets promoted from this F U K up !!
yours disgusted
Perhaps it's just a ploy by whichever couple of underpaid old ladies keep the records of people eligible for call-out under the Reserved Forces Act to get people to write so that thay can update their woefully out of date records?
When I was serving PVR-porridge at Binnsworth, it was pretty obvious why some RAFResA folk were proving hard to find - institutional administrative incompetence.
If you've PVR'd, you're probably still eligible for call-out if you haven't reached your original NRD date. And, of course, you're supposed to keep 'Them' informed of your whereabouts every time you change address. But since 'They' don't tell you when 'They' change address, how can people be expected to do likewise.
I also pointed out that it would be up to 'Them' to prove that 'They' hadn't been told of any address change, should 'They' try to prosecute anyone for failing to respond to call-out! "I rang you ages ago and told you - didn't you write it down" was all anyone would need to say!
When I was serving PVR-porridge at Binnsworth, it was pretty obvious why some RAFResA folk were proving hard to find - institutional administrative incompetence.
If you've PVR'd, you're probably still eligible for call-out if you haven't reached your original NRD date. And, of course, you're supposed to keep 'Them' informed of your whereabouts every time you change address. But since 'They' don't tell you when 'They' change address, how can people be expected to do likewise.
I also pointed out that it would be up to 'Them' to prove that 'They' hadn't been told of any address change, should 'They' try to prosecute anyone for failing to respond to call-out! "I rang you ages ago and told you - didn't you write it down" was all anyone would need to say!
Join Date: May 2004
Location: Up North
Posts: 801
Likes: 0
Received 0 Likes
on
0 Posts
I'm interested in investigating a class action lawsuit against the MoD - breach of OSA, breach of DPA, breach of HRA. Depends on the extent of the data lost. Anyone else interested? Not interested in wodges of cash, more the principle, so ambulance chasers welcome!
Join Date: Sep 2008
Location: Kinloss
Posts: 3
Likes: 0
Received 0 Likes
on
0 Posts
Safeware #68
I also received same e-mail. Have replied both by e-mail & post with;
"As this is your cock-up you must be out of your tiny minds if you think that I am going to send you my driving licence and passport details. If I didn’t know any difference, I would imagine that this e-mail was a phishing expedition. I am afraid that it is up to you as the data controller, as defined in the Data Protection Act 1998, to look after our sensitive data.
In my initial e-mail, I gave ample information for you to identify me. It is now up to you to ensure that no financial loss or security problems result from your negligence. My bank has been informed of the possibility of fraud and should any problems occur in the future, you will be held responsible, in law.
Yours faithfully,"
I also received same e-mail. Have replied both by e-mail & post with;
"As this is your cock-up you must be out of your tiny minds if you think that I am going to send you my driving licence and passport details. If I didn’t know any difference, I would imagine that this e-mail was a phishing expedition. I am afraid that it is up to you as the data controller, as defined in the Data Protection Act 1998, to look after our sensitive data.
In my initial e-mail, I gave ample information for you to identify me. It is now up to you to ensure that no financial loss or security problems result from your negligence. My bank has been informed of the possibility of fraud and should any problems occur in the future, you will be held responsible, in law.
Yours faithfully,"
Last edited by Intellectual Bully; 1st Oct 2008 at 10:52. Reason: Typo
Join Date: Dec 2006
Location: Wilts
Posts: 183
Likes: 0
Received 0 Likes
on
0 Posts
Hey Jess
Absobloominlootely go fer it. The stress is already causing me sleepless nights (and afternoons now that I am a civvi!). I have had the standard response too but why would I send even more private data, which matched up to the stuff that they have already lost will mean that some scroat can nick my identity
Ed
Absobloominlootely go fer it. The stress is already causing me sleepless nights (and afternoons now that I am a civvi!). I have had the standard response too but why would I send even more private data, which matched up to the stuff that they have already lost will mean that some scroat can nick my identity
Ed
Join Date: Jan 2008
Location: On the Outside
Posts: 64
Likes: 0
Received 0 Likes
on
0 Posts
Update to Post #58
Those of us who've left might be interested to know that I've just received an e-mail reply (some 28 hours after my initial enquiry):
Dear Sir,
Thank you for your enquiry to MoD RAF Data Mailbox.
As you have provided details for us to identify you and have a current JPA record, we do not require any additional details at this time.
As soon as the data has been analysed and we have determined what information was on the USB Portable disc drives, you will be notified in writing as to whether you are affected by this incident. This will be done via the address that we hold for you on the JPA system, please ensure these details are up to date.
Yours faithfully,
RAFData mailbox
Mail Point 600
RAF DATA
KENTIGERN HOUSE
65 BROWN STREET
GLASGOW
G2 8EX
Dear Sir indeed! Still, the system seems to work so far...
Dear Sir,
Thank you for your enquiry to MoD RAF Data Mailbox.
As you have provided details for us to identify you and have a current JPA record, we do not require any additional details at this time.
As soon as the data has been analysed and we have determined what information was on the USB Portable disc drives, you will be notified in writing as to whether you are affected by this incident. This will be done via the address that we hold for you on the JPA system, please ensure these details are up to date.
Yours faithfully,
RAFData mailbox
Mail Point 600
RAF DATA
KENTIGERN HOUSE
65 BROWN STREET
GLASGOW
G2 8EX
Dear Sir indeed! Still, the system seems to work so far...
Join Date: Feb 2004
Location: Wiltshire
Age: 59
Posts: 903
Likes: 0
Received 0 Likes
on
0 Posts
I've just received an e-mail reply (some 28 hours after my initial enquiry):
Sent my e-mail at Sat 27th Sept 11:23. Finally got a reply 30th Sep 15:16. Only took 75 hours to send me the standard "we need you to prove that you are who you are so we can add that data to that which we held on you but have lost" reply.
Stunning customer
service.....
Join Date: Nov 2000
Location: Far far away
Age: 53
Posts: 715
Likes: 0
Received 0 Likes
on
0 Posts
A suggestion for a place to start with research:
Complaints about data protection policy - ICO
Edited to add:
Bored with studying, I took some time to read the Data Protection Act this arfternoon....
Section 64 makes provision for written requests to include e-mail:
"The requirement that any notice, request, particulars or application to which this section applies should be in writing is satisfied where the text of the notice, request, particulars or application—
(a) is transmitted by electronic means,
(b) is received in legible form, and
(c) is capable of being used for subsequent reference."
Regarding Rights of Access, section 7 allows the Data Controller to request "such information as he may reasonably require in order to satisfy himself as to the identity of the person making the request and to locate the information which that person seeks."
So proof of identity is required, but not proof of address.
I would recommend to all those who have received the demand to make an application in writing to a snail-mail address, to include proof of ID and address to reply instead by E-mail and include a scanned copy of photo ID. If the eedjuts don't respond iaw the Act this time then they will have yet more questions to answer to when the Commissioner steps-in.
Complaints about data protection policy - ICO
Edited to add:
Bored with studying, I took some time to read the Data Protection Act this arfternoon....
Section 64 makes provision for written requests to include e-mail:
"The requirement that any notice, request, particulars or application to which this section applies should be in writing is satisfied where the text of the notice, request, particulars or application—
(a) is transmitted by electronic means,
(b) is received in legible form, and
(c) is capable of being used for subsequent reference."
Regarding Rights of Access, section 7 allows the Data Controller to request "such information as he may reasonably require in order to satisfy himself as to the identity of the person making the request and to locate the information which that person seeks."
So proof of identity is required, but not proof of address.
I would recommend to all those who have received the demand to make an application in writing to a snail-mail address, to include proof of ID and address to reply instead by E-mail and include a scanned copy of photo ID. If the eedjuts don't respond iaw the Act this time then they will have yet more questions to answer to when the Commissioner steps-in.
Last edited by D-IFF_ident; 1st Oct 2008 at 05:45. Reason: Additional info
I don't own this space under my name. I should have leased it while I still could
FLASH:
MOD to announce that following the ruling on security of laptops similar rules are to be applied to desktops.
Users are not to log on and Desktop PCs are not to be switched on until users are instructed by email so to do.
Once switched on, users of stand-alone PCs are to run the following command at the C: prompt> C:> Format C: and answer YES to the following question.
Users of network machines need take no action until they receive the email telling them to switch on and log in.
This message is from RAF Police Central. If you receive this message by mistake you are to ignore it and telephone the JPAC enquiry centre to tell them you have received it and that your data has been compromised.
MOD to announce that following the ruling on security of laptops similar rules are to be applied to desktops.
Users are not to log on and Desktop PCs are not to be switched on until users are instructed by email so to do.
Once switched on, users of stand-alone PCs are to run the following command at the C: prompt> C:> Format C: and answer YES to the following question.
Users of network machines need take no action until they receive the email telling them to switch on and log in.
This message is from RAF Police Central. If you receive this message by mistake you are to ignore it and telephone the JPAC enquiry centre to tell them you have received it and that your data has been compromised.
Reminds me of the (probably apocryphal) tale of some visitor at a computer fair. The chap at the stand in question was proudly demonstrating his 'voice interface' software...
"It does what you ask - you don't need a keyboard"
"Really? That's rather clever. Can you show me?"
"Certainly sir. Let's try this: OPEN FILE DEMO!"
"OK"
"FILE PRINT"
"OK"
And 'Demo' was duly printed. The visitor then had in idea....
"Can I have a go?"
"Of course, sir"
"Thanks. C PROMPT!" "OK" " C FORMAT!"
"You bugger!!"
Join Date: Feb 2007
Location: Exiled in England
Age: 48
Posts: 1,015
Likes: 0
Received 0 Likes
on
0 Posts
I just sent the bar-stewards this.
To Whom It May Concern
Yesterday I telephoned the JPAC helpline for the loss of RAF and veterans data. I was treated very badly by the "call handler" on the other end of the telephone. Furthermore the call handler has informed me that for them to investigate who I am I need to send in two more pieces of personal information with my service number to prove who I am. I will not be trusting any more of my personal data to the same people who managed to lose so much data in the first place. I have contacted my banks and advised them I am an "at risk" client and they are to take maximum measures to protect my finances and data.
My service number is XXXXXXXX.
Assuming you have not lost my entire RAF history then you can telephone me or email me at the address this mail was sent from and using my file ask me questions to identify me correctly - then you will be able to tell me whether or not my data has been affected. If you cannot find my file then, obviously I have been badly affected and you need to tell me urgently.
Be futher advised I am seeking legal advice with regards to this matter.
Also note I am emailing you from my work email account as I do not wish you to have access to my personal account.
Yours, with considerably more professionalism than has been shown by the RAF
Yesterday I telephoned the JPAC helpline for the loss of RAF and veterans data. I was treated very badly by the "call handler" on the other end of the telephone. Furthermore the call handler has informed me that for them to investigate who I am I need to send in two more pieces of personal information with my service number to prove who I am. I will not be trusting any more of my personal data to the same people who managed to lose so much data in the first place. I have contacted my banks and advised them I am an "at risk" client and they are to take maximum measures to protect my finances and data.
My service number is XXXXXXXX.
Assuming you have not lost my entire RAF history then you can telephone me or email me at the address this mail was sent from and using my file ask me questions to identify me correctly - then you will be able to tell me whether or not my data has been affected. If you cannot find my file then, obviously I have been badly affected and you need to tell me urgently.
Be futher advised I am seeking legal advice with regards to this matter.
Also note I am emailing you from my work email account as I do not wish you to have access to my personal account.
Yours, with considerably more professionalism than has been shown by the RAF
Join Date: Feb 2007
Location: Exiled in England
Age: 48
Posts: 1,015
Likes: 0
Received 0 Likes
on
0 Posts
I am hoping that I offend some halfwit manager enough to get me in for a bollo44ing. After all, I'm still in the reserves aren't I?? I want to see how many of them I can p*ss off. I mean, it's not like the rest of us are this careless and incompetent in our jobs - we'd all be unemployed if we were.
Join Date: Oct 2004
Location: [loh-key-shuhn] 1. a place of settlement, activity, or residence 2. a place or situation occupied
Age: 52
Posts: 238
Received 0 Likes
on
0 Posts
So much for the idea of getting a straight "Yes" or "No" based on my service number...
I'm going to have to send some stuff off to these idiots, aren't I...?
Dear Sir
When we receive your identification to the address provided we can then confirm if any of your information was held, this will be sent to your home address.
Unfortunately until then we are unable to provide any information.
Regards
When we receive your identification to the address provided we can then confirm if any of your information was held, this will be sent to your home address.
Unfortunately until then we are unable to provide any information.
Regards
Join Date: Aug 2006
Location: firmly on dry land
Age: 81
Posts: 1,541
Likes: 0
Received 0 Likes
on
0 Posts
It had her name and address thus confirming the worst and potentially telling this to complete strangers.
So in this case why not just write to the addresses they have on record?
Join Date: Jul 2005
Location: South West
Posts: 142
Likes: 0
Received 0 Likes
on
0 Posts
Sent the following reply to rafdata following their "provide proof of address" request. I don't expect it to do any good, but it made me feel better.
Dear Sir/Madam
I am writing to question the need to provide hard-copy confirmation of my address. My final RAF pay statements were sent to the address I gave below. My pension statements are also sent to this address. When I left the RAF, I received a letter from Kentigern house, again to this address, stating that Service Number and date of leaving were all that was required in future correspondence to verify my identity (your ref EDS/AFPAA/######## Dated ## ### ##). As I have given you both of these, and Section 64 of the Data Protection Act provides for verification of identity to be provided by e-mail, I believe that you should have all the information that you need to answer my original question.
Yours
N Joe
Dear Sir/Madam
I am writing to question the need to provide hard-copy confirmation of my address. My final RAF pay statements were sent to the address I gave below. My pension statements are also sent to this address. When I left the RAF, I received a letter from Kentigern house, again to this address, stating that Service Number and date of leaving were all that was required in future correspondence to verify my identity (your ref EDS/AFPAA/######## Dated ## ### ##). As I have given you both of these, and Section 64 of the Data Protection Act provides for verification of identity to be provided by e-mail, I believe that you should have all the information that you need to answer my original question.
Yours
N Joe