Server theft highlights bad security procedures

There are often no formal processes for checking forensic firms' security

A server containing police evidence was stolen

A server containing details of case files and mobile phone records to be used as evidence in terrorism trials has been stolen from a digital forensics company.

The equipment disappeared yesterday from the Kent premises of Forensic Telecommunication Services - whose clients include Scotland Yard and the Crown Prosecution Service.

The theft highlights concerns reported in Computing in April that police forces often fail to check the security of third party digital forensics firms.

There are currently no formal processes for outsourcing such work and one senior manager at a forensics supplier has described the current situation as a 'sham'.

'It's an old boys network - security has never been checked at my company,' he said.

According to a statement from Forensic Telecommunications Services, the server stolen yesterday was one of several items removed from the premises and none of the information it contained will compromise on-going police investigations.

'The information is made up of either old cases that have passed through the judicial process, or cases that are already in the judicial system and so subject to full disclosure to both defence and prosecution teams,' said the company.