Lulzsec claim to have the 2011 uk census data.

[Tonsko]

Edit.

[FourWheelDrift]

Russ T Bolt said:

Claim is that they have all of the 2011 census data, I bet a very high percentage of it is still in a secure warehouse somewhere waiting to be scanned.

So unless they are wandering around with portable scanners, the claims are rubbish.

I think I read on the site (unless it hasn't been updated) that you can still send them back. - http://2011.census.gov.uk/Complete-your-census-onl...

If the data has been stolen then the holders of the data have broken the Data Protection Act 1998, the Census Act 1920 and the Statistics and Registration Service Act 2007 (SRSA).

So someone will be really in this st if that's the case.

[number2]

s1962a said:

Name
Addres
DOB
Ethnicity
Profession
Income bracket
etc etc

The census was anonymous and didn't ask for any financial figures - only whether you were employed.

There is naff all of any interest to anyone but a provider of public services.

[FourWheelDrift]

number2 said:

The census was anonymous and didn't ask for any financial figures - only whether you were employed.

Goes to prove how much attention I gave it then

[Tonsko]

FourWheelDrift said:

If the data has been stolen then the holders of the data have broken the Data Protection Act 1998, the Census Act 1920 and the Statistics and Registration Service Act 2007 (SRSA).

So someone will be really in this st if that's the case.

None of which Lockheed Martin are likely to care about really.

[number2]

FourWheelDrift said:

Goes to prove how much attention I gave it then

I didn't get round to it for ages then eventually did it on-line. It took all of 30 seconds. Really not intrusive at all unless you don't like telling people you are caucasion/black/etc and have a job/don't.

[Russ T Bolt]

FourWheelDrift said:

I think I read on the site (unless it hasn't been updated) that you can still send them back. - http://2011.census.gov.uk/Complete-your-census-onl...

what I was trying to say was that the majority of the data isn't available to hacked.

If the data has been stolen then the holders of the data have broken the Data Protection Act 1998, the Census Act 1920 and the Statistics and Registration Service Act 2007 (SRSA).

So someone will be really in this st if that's the case.

[mrmr96]

number2 said:

s1962a said:

Name
Addres
DOB
Ethnicity
Profession
Income bracket
etc etc

The census was anonymous and didn't ask for any financial figures - only whether you were employed.

There is naff all of any interest to anyone but a provider of public services.

Take those blinkers off?

[PintOfKittens]

FourWheelDrift said:

If the data has been stolen then the holders of the data have broken the Data Protection Act 1998, the Census Act 1920 and the Statistics and Registration Service Act 2007 (SRSA).

So someone will be really in this st if that's the case.

Not to mention:

Section 58A Counter Terrorism Act

Eliciting, publishing or communicating information about members of armed forces etc(1)A person commits an offence who—
(a)elicits or attempts to elicit information about an individual who is or has been—(i)a member of Her Majesty's forces,(ii)a member of any of the intelligence services, or(iii)a constable,which is of a kind likely to be useful to a person committing or preparing an act of terrorism, or
(b)publishes or communicates any such information.

[number2]

mrmr96 said:

Take those blinkers off?

So what deeply personal information did you provide?

[mrmr96]

number2 said:

So what deeply personal information did you provide?

Enough for identify theft or a spearphishing attack.

[Shuvi Tupya]

FourWheelDrift said:

The safer option to avoid the possible £1000 fine was to fill it in with anything you thought of at the time that isn't correct when answering snooping questions you wanted privacy on (apart from name and address), like I did. Can't remember most but I think I used "none" quite often.

Surely they can't fine me. Anything i say on here is plainly just internet bravado.. I am sure i remember sending the form back..

[69 coupe]

Lulzsec, 19y arrested in Wickford Essex, joint FBI/Scotland Yard according to LBC radio.

[DWP]

Are we surprised a 19 year old, beat the system? Dear God the incompetence is so huge as to be beyond satire.

[PintOfKittens]

anonymous said:

[redacted]

So thats what they call prison sex these days

[number2]

mrmr96 said:

number2 said:

So what deeply personal information did you provide?

Enough for identify theft or a spearphishing attack.

Fair enough, but name (I was wrong when I said anonymous as we were asked for this) and date of birth are easily available elsewhere for someone with even a small motivation to obtain them.

Questions can be found here for anybody's reference http://www.ons.gov.uk/census/2011-census/2011-cens...

[Russ T Bolt]

DWP said:

Are we surprised a 19 year old, beat the system? Dear God the incompetence is so huge as to be beyond satire.

He hasn't beaten the system, data isn't there = false claims

[mrmr96]

number2 said:

mrmr96 said:

number2 said:

So what deeply personal information did you provide?

Enough for identify theft or a spearphishing attack.

Fair enough, but name (I was wrong when I said anonymous as we were asked for this) and date of birth are easily available elsewhere for someone with even a small motivation to obtain them.

Questions can be found here for anybody's reference http://www.ons.gov.uk/census/2011-census/2011-cens...

Yes, I know that a name/address/dob etc COULD be obtained with a little work but the point is that this information is very very detailed and people are (generally!) more likely to be honest when filling in the census than some other types of data collection (e.g. for companies customer records). And it will be more complete as in theory everyone should have done it, not just people using whatever online shop gets hacked next.

So it will be one of the best quality databases available to crims. (Not perfect, we know that, but still one of the best around if not THE best around.)

So beside the name/dob/address they also have details of your wife, your kids, how big your house is, what your profession is, how many cars you have, if you're at home in term time, your ethnic group/language/religion & what qualifications you have.

This will make it much more convincing if they wanted to send you a TARGETED phishing communication, as they could make very convincing refernces to you and your family's real cicrumstances. (e.g. the letter which says 'dear homeowner' goes in the bin, but the one which starts 'dear mr fred smith, I have some news concerning your daughter, sarah smith...' will most likely get much more attention.)

You may well be savvy enough not to ever be fooled, but this info could be devastating to many more people than other data sets previously used by criminals.

[jammy_basturd]

I think you'll find "crims" would more interested in those security breaches that result in names and credit card and bank details being obtained.

[mrmr96]

jammy_basturd said:

I think you'll find "crims" would more interested in those security breaches that result in names and credit card and bank details being obtained.

The above data is only one step away from obtaining that, if they can craft a sufficiently convincing communication to persuade you to part with your passwords.