HSBC now faces the prospect of an investigation by the Financial Services Authority. Because the details are password protected and do not include address data, HSBC has said that customers' potential exposure to fraud is limited. However, it plans to write to everyone whose name is on the disc to explain what has happened.
A spokesperson said: "We would like to apologise to life assurance customers for any concern this may cause them. Each customer will be contacted shortly and a thorough investigation into this matter is underway."
Last December, the Financial Services Authority £1.26m for not having effective controls in place to protect clients' confidential information, after customers fell victim to a £3.3m identity fraud. by the FSA in February 2007 after a laptop carrying customer details was stolen from the home of an employee.