FCA loses 323 electronic devices worth over £300,000 raising IT security concerns

The figures, obtained through a Freedom of Information request, reveal a surge in lost or stolen devices in the past year.

The UK’s financial regulator the Financial Conduct Authority (FCA), misplaced a total of 323 electronic devices estimated to be worth £310,600 over the last three years, according to a freedom of information request. 

The FOI, which was obtained by law firm Griffin Law, revealed that over the three most recent financial years hundreds of laptops, tablets, desktops and mobile phones were reported as lost or stolen by FCA staffers.

In the most recent financial year, overall lost devices surged by 369 per cent, with 197 devices being reported missing worth an estimated £193,400. This compares to losses of 42 devices in 2020 worth around £41,500 and 84 in 2019 worth an estimated £75,700. 

Tablet computers topped the lost devices list, with 201 lost and 14 stolen across the three financial years, worth an estimated £215,000 in total. A staggering 123 of these devices were reported as lost or stolen in 2021. 

Next was laptops, with 88 going missed over the combined period at a total cost of £88,000 – 68 of these incidents occurred in 2021.

A spokesperson for the FCA said:

“The FCA has strong security measures in place to ensure that data is protected in the event that a device is lost or stolen, including Bring Your Own Devices. We use encryption to protect information on FCA devices and two-factor authentication to ensure only authorised individuals can access the FCA’s network. We have clear processes to ensure losses are reported in a timely manner and access to the FCA network through that device is revoked remotely as soon as a loss is reported.

“Staff are also trained to not store sensitive data on their devices, to minimise the risk of data being exposed.”

Edward Blake, Area Vice President EMEA, Absolute Software says managing a large, distributed workforce is no easy task, particularly in the midst of a pandemic, and keeping tabs on valuable devices like laptops is growing increasingly difficult. 

“If one of these lost devices ends up in the wrong hands, the FCA could be facing consequences far more severe than the cost to replace them. For example, sophisticated cybercriminals can steal the data contained on these devices, access more businesses files, or intercept emails between colleagues, for the purpose of data theft, monetary gain, high-profile scams, or ransomware," he said. 

“Therefore, it is more critical than ever to have a permanent digital connection to every endpoint, as well as the ability to lock, freeze or wipe the device if it is at risk of being compromised,” he added.