GCHQ loses track of thousands of storage devices with sensitive data
Britain's spy agency cannot account for USB sticks and hard drives that may contain classified intelligence, years after first being flagged by its watchdog.
What to know
- GCHQ has lost track of thousands of storage devices—USB sticks, hard drives, memory cards—that may contain highly classified data including intercepted communications and information extracted from computers and phones.
- The Investigatory Powers Commissioner first raised the issue years ago; the October 2026 report shows the problem remains unresolved, with GCHQ unable to account for the devices or confirm how many are actually lost.
- GCHQ acknowledged its tracking system was inadequate but claims corrective measures and risk-mitigation controls are now in place.
- The incident represents a significant security failure at a major intelligence agency responsible for protecting sensitive national security data.
The story is absurd and darkly humorous—a major spy agency losing track of thousands of classified devices.
-
“Relatable, TBH”
reedmideke · Mastodon ↗
“may contain IPA-related data”
Brian Leveson, Investigatory Powers Commissioner · Politico Europe ↗
Brian Leveson Investigatory Powers CommissionerGCHQ British intelligence agencyInvestigatory Powers Commissioner (IPCO) Intelligence oversight watchdog
How it unfolded 1 development · click the chart to see its coverage articlesposts
-
1
GCHQ acknowledges tracking system flaws, claims corrective action
GCHQ's spokesperson acknowledged that its "management system for removable media was previously not sufficiently robust" and stated the agency has "taken action against all their recommendations" and implemented "a range of measures to mitigate the risks posed by these items."
“our management system for removable media was previously not sufficiently robust to effectively track the items that were registered for use.”
— GCHQ spokesperson -
C
🇬🇧 spion agentur GCHQ har mistet tusindvis af lager-enheder En regerings-undersøgelse har fundet at agenturet har forlagt et betydeligt antal USB-sticks, harddiske og hukommelses-kort Nogle af enhederne har angiveligt følsomme oplysninger, men langt de fleste af de manglende hardwareartikler blev stærkt krypteret https://www…
-
-
background
IPCO expresses concern over investigation timeline — The Investigatory Powers Commissioner's report states the agency remains "very concerned about this issue and are disappointed with the time it has taken GCHQ to investigate," noting the system currently estimates devices "to be in the thousands" and is working to determine how many have been confirmed as lost.
-
background
IPCO report confirms thousands of devices still unaccounted for — The Investigatory Powers Commissioner's report found that GCHQ cannot account for thousands of storage devices including USB sticks, hard drives, and memory cards that may contain sensitive IPA-related data—information collected under the Investigatory Powers Act 2016, including intercepted emails, texts, and telephone calls.
-
background
IPCO first raises missing storage devices with GCHQ — The Investigatory Powers Commissioner initially disclosed the loss of considerable numbers of storage devices at GCHQ and MI5, some potentially containing information classified as "TOP SECRET."