GCHQ still cannot account for thousands of storage devices
First merged summary.
IPCO says GCHQ still cannot state how many removable drives may be missing or whether IPA data on them can be recovered.
The Investigatory Powers Commissioner’s Office, in its 2025 annual report, said it is very concerned that GCHQ cannot account for thousands of USB sticks, drives, discs, memory cards and other portable media. Some devices may hold data obtained under the Investigatory Powers Act. IPCO says GCHQ still cannot state the exact scale, location or recoverability, although Sir Brian Leveson said the underlying issues were raised several years ago. The report does not allege that adversaries obtained any devices. GCHQ says an old tracking system was inadequate, that it has audited holdings, updated processes and addressed IPCO’s recommendations, and that automated asset tracking will be in place by year-end. It declined to say whether unauthorised people accessed any missing media.
- IPCO’s 2025 report puts removable-media losses in the thousands.
- Media may include USB sticks, drives, discs and memory cards.
- Some devices may hold Investigatory Powers Act data.
- GCHQ still cannot give exact scale, location or recoverability.
- GCHQ plans automated asset tracking before year-end.
- GCHQ declined to say if unauthorised people accessed missing media.
What each outlet adds
beyond the shared facts- The RegisterOld tracking was inadequate; automated tracking due by year-end.
- The RecordLists device types; no claim adversaries obtained any; access question unanswered.
Coverage
oldest first · one row per article · UTCGCHQ cannot say how many sensitive storage drives remain missing
IPCO says the agency still lacks a clear count of lost media that may hold Investigatory Powers Act data, years after officials were told.
GCHQ cannot account for thousands of removable storage devices, watchdog says
IPCO says GCHQ still lacks a clear picture of scale and recoverability of media that may hold intercepted data.