UK spy agency GCHQ cannot account for thousands of sensitive data storage devices

Key facts

• Thousands of USB sticks, hard drives, and memory cards are unaccounted for.
• The devices may contain sensitive data collected under the Investigatory Powers Act 2016.
• GCHQ is working to report how many devices are confirmed lost.

Britain's intelligence agency GCHQ has acknowledged that it cannot locate thousands of storage devices, including USB sticks, hard drives, and memory cards, which could hold sensitive material. An official watchdog, the Investigatory Powers Commissioner (IPCO), found that the agency's previous system for tracking these items was 'not sufficiently robust.' The devices may contain data collected under the Investigatory Powers Act 2016, such as intercepted communications. GCHQ estimates the number of unaccounted-for devices to be in the thousands and is working to confirm how many are definitively lost. Last year, IPCO had already disclosed similar issues with GCHQ and MI5 regarding missing storage devices, some potentially classified as TOP SECRET. GCHQ stated it has taken action to address the flaws and has implemented measures to mitigate risks.