The loss of two disks with details of 25 million people was far from an isolated incident. What is going on at HMRC?