GCHQ cannot account for thousands of removable storage devices, watchdog says
Original title: British spy agency cannot account for thousands of data storage devices, watchdog says
IPCO says GCHQ still lacks a clear picture of scale and recoverability of media that may hold intercepted data.
The Investigatory Powers Commissioner’s Office, in its 2025 annual report published Thursday, said it was very concerned that GCHQ cannot account for thousands of USB sticks, drives, discs, memory cards and other portable media. Some devices may hold data obtained under the Investigatory Powers Act. The report does not allege adversaries obtained any devices. GCHQ says it has audited holdings, updated processes and addressed IPCO’s recommendations. The same report says a flawed, unnamed software application caused misidentified selectors, leading to five counter-terrorism stops of innocent people.
Unconfirmed: It is unconfirmed whether any missing devices were accessed without authorisation or how many the later audit found lost.
- GCHQ estimated total losses of removable media as in the thousands.
- Sir Brian Leveson said underlying issues were raised several years ago.
- Five people were stopped, detained, had devices downloaded and biometrics taken.
- IPCO said GCHQ could not have foreseen the target-discovery software failure.
- GCHQ declined to say whether unauthorised people accessed any missing media.
Impact: Possible loss of media that may hold intercepted communications data
- Organizations
- GCHQInvestigatory Powers Commissioner's Office
- Countries
- United Kingdom
From the original article
3 min read at therecord.mediaThe Investigatory Powers Commissioner’s Office (IPCO) in its annual report for 2025, published Thursday, said it was “very concerned” and “disappointed with the time it has taken GCHQ to investigate” the issue.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.