HSBC has admitted it has lost a disc containing personal details of 370,000 customers after sending it via unregistered mail to Swiss Re.
The disc, sent on January 31, contains customers names, dates of birth and health information, but HSBC says it does not include any address or bank account details.
The disc is password protected but not encrypted.
HSBC says it was sent after the bank’s electronic transfer system broke down and insists it did not become aware of the problem until early last month.
The bank says it is writing to its life insurance customers to warn them, but says it has found no evidence of fraudulent activity as a result of the loss.