Huge amounts of UK data at risk of being stolen from aging Whitehall computer systems

Hacker
(Image credit: Unknown)

Outdated tech used in His Majesty’s Revenue and Customs (HMRC) IT systems could put the UK at risk of a huge data breach if not updated, HMRC has warned.

As per its privacy policy, HMRC stores data such as; name, title, addresses, telephone numbers, and personal email addresses; gender; marital status and dependents; National; Insurance number; bank account details; information about your income; information about your employment; information about your business activities; information about your domestic and business properties; passport and driving license information.

In an attack or malfunction, all of this data could be put at risk. But it's not just hackers that could cause the system to crumble, as aging IT infrastructure which is no longer supported or updated is at a higher risk of technical failure the longer it is used.

Lack of IT security puts everyone at risk

Such an attack would have huge ramifications for UK businesses, and the risk of an attack will continue to increase if IT systems are not updated.

Russia, China, and North Korea could be among those looking to target UK computer systems to steal data and damage the economy, alongside other cyber criminals and organizations.

The cost of upgrading such a monolithic system as Whitehall’s IT infrastructure would be a huge investment likely paid for by the taxpayer, although there are no plans laid down yet for such a renovation.

Speaking to The Independent, Conservative MP Harriet Baldwin, chair of parliament’s Treasury committee said “It is concerning that our taxation systems, which support our key public services, could potentially be harmed permanently because of out-of-date IT equipment. I am sure the committee will seek answers on this issue during our regular scrutiny sessions with HMRC.”

More from TechRadar Pro

Benedict Collins
Senior Writer, Security

Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security.

Benedict provides detailed analysis on state-sponsored threat actors, APT groups, and the protection of critical national infrastructure, with his reporting bridging the gap between technical threat intelligence and B2B security strategy.

Benedict holds an MA (Distinction) in Security, Intelligence, and Diplomacy from the University of Buckingham Centre for Security and Intelligence Studies (BUCSIS), with his specialization providing him with a robust academic framework for deconstructing complex international conflicts and intelligence operations, and the ability to translate intricate security data into actionable insights.