News

Criminal Courts Review Commission set to review subpostmasters' claims of wrongful prosecution

The Criminal Courts Review Commission (CCRC) reviews subpostmasters' claims of wrongful prosecution by the Post Office due to IT problems

Karl Flinders
By
Published: 29 Apr 2015 16:15

The Criminal Courts Review Commission (CCRC) is considering subpostmasters' claims of wrongful prosecution for offences such as theft and false accounting, as a result of problems with the Post Office's Horizon IT system they used to file accounts.

A former expert witness in one case against a subpostmaster has raised questions over the integrity of the IT system, as he saw it at the time.

So far 15 subpostmasters who were prosecuted in the past have submitted applications to have their cases reviewed, and the CCRC expects more. All will be assessed and could have their claims investigated in greater depth if the CCRC believes there is a case. If the CCRC then decides there are grounds, it can send cases to the Court of Appeal, which is obliged to hear them.

“In March 2015, the commission received applications from former postmasters/mistresses convicted of offences such as theft and false accounting having been prosecuted by the Post Office. The theme relevant to those applications is a suggestion that difficulties with the Horizon computer system and/or with the training and support provided in using the system were the cause of the facts that led to the convictions,” said a CCRC spokesman. 

“We expect to receive more applications on this same theme in the coming months and will be taking a co-ordinated approach to our reviews.” The spokesman said the CCRC had already been in contact with the Post Office in relation to these cases and Horizon.

Post Office quick to legal action, says report

The Post Office has been forced on the defensive following recent media reports critical of the way it handled subpostmasters' claims.

These followed a report published last week, carried out by forensic accountants Second Sight on Post Office’s behest, which criticised the way the Post Office handled claims from subpostmasters. Computer Weekly has been following the story since 2009, initially revealing the claims of seven subpostmasters (see Computer Weekly timeline of articles, below).

Since last week’s independent report – which included such criticisms as the Post Office being too quick to take legal action, rather than get to the bottom of the causes of unexplained accounting shortfalls – there have been a number of reports in the national press. The Post Office's PR team published a note on the matter to subpostmasters (see panel below for full text).

The Post Office’s head of communications, Mark Davies, wrote in the Post Office Subspaceonline magazine to inform subpostmasters of the organisation’s belief that much of the media reporting of the alleged problems with its Horizon accounting system had been blown up to present an alarming picture that did not reflect reality.

Davies wrote: “Much of the reporting is designed, as reporting often is, to present a picture which appears alarming: it does not however reflect the reality of the situation, which is some way from that you may read about or see on the TV.”

When asked if it thought the media was sensationalising the alleged problems, the Post Office said media outlets were repeating false claims. “Unsubstantiated, misleading and inaccurate statements have, regrettably, continued to be made to the media and in the public domain throughout this process. This is not in the interests of applicants in the scheme nor the communities we serve.”

Davies also said the Second Sight report did not support its claims with facts. “Unfortunately the forensic accountants have also repeated allegations which are not supported by the facts. We cannot of course support their findings on these points - and you would not expect us to do otherwise,” he wrote.

Read the full note from Post Office head of communications Mark Davies in the Post Office Subspaceonline magazine

Note on the Horizon media coverage

“I wanted to drop you a note about the media coverage you may have seen this week about the report on Horizon and other issues.

Much of the reporting is designed, as reporting often is, to present a picture which appears alarming: it does not however reflect the reality of the situation, which is some way from that you may read about or see on the TV.

This is an issue which has been around for a while and the Post Office is proud of the way it has been handled. We have taken the complaints from a tiny number of largely ex-postmasters and handled them very seriously and very sensitively.

We have published a detailed report on the issue and you can read it at this link or, if you would prefer, we can send you a paper copy: email me at [email protected]

Unfortunately the forensic accountants have also repeated allegations which are not supported by the facts. We cannot of course support their "findings" on these points - and you would not expect us to do otherwise.

Disappointingly some of these unsupported allegations have been taken by some media and blown up into the stories you have seen in the papers and on television. To be clear, Post Office is not destroying evidence and has no desire to cover up findings.  Like everyone, we want to know the facts, but we have to act on facts – not on unsubstantiated allegations. The position we have reached after three years of investigation is that there is absolutely no evidence at all that Horizon does not work as it should. Indeed it is robust and reliable. The independent forensic accountants have also found nothing that contradicts this.

The Post Office has handled this issue in the right way. We have appointed independent investigators and set up a mediation scheme. Where we have been told that things like training and support could be better, we have acted. 

We have said we will put all those cases without 30 rulings forward for mediation. Those cases with court rulings are being considered on an individual, case-by-case basis. 

If applicants wish, the Post Office will ensure that their cases are reviewed by the independent forensic accountants. 

I hope this helps. It is difficult to capture every element of this in a note like this so you may have questions and if you do please do email me”

Post Office covering up miscarriages, says MP

But Alan Bates, a member of the Justice for Sub-postmasters Alliance (JFSA) pressure group said the report was full of evidence – but more was contained in individual case reviews, as there was an agreement that no evidence would be published that could reveal the identities of people involved in individual cases. Each of the 150 cases accepted in the mediation scheme were investigated by Second Sight, and each will have its own report with more detailed evidence of the cases.

When Computer Weekly put this to the Post Office, it said: “It was agreed that Second Sight’s work – for both its reports and its case reviews – should be logical and evidence-based. We have made our position clear in our response to the report.”

Former MP James Arbuthnot – the most vocal of a cross-party group of 140 MPs campaigning on behalf of subpostmasters – said the Second Sight report confirmed the Post Office may perpetrated serious miscarriages of justice. “The Post Office is now trying to cover up these miscarriages of justice, by suggesting that the report contains no evidence. It is packed with evidence, despite the shameful determination of the Post Office to refuse to give the independent investigators the documents they needed – and which the Post Office had promised to provide,” Arbuthnot said.

Davies said the Post Office had only taken “complaints from a tiny number of largely ex-postmasters”. The "tiny number" refers to the 150 applications accepted into the Case Review and Mediation Scheme the Post Office set up.

The Post Office said: “The scheme was widely communicated for three months between August and November 2013. We used our internal channels to encourage people to come forward, we issued a press release and there was media coverage about the scheme. Post Office had previously used these channels to encourage postmasters to come forward with complaints during a period agreed with the JFSA and Second Sight between December 2012 and February 2013. Any postmaster who came forward during this earlier period also had the opportunity to apply to the Scheme. The JFSA also communicated the scheme.”

Post Office dropped case over forensic questions

Bates at JFSA said there had been many more cases and a surge of people contacting the organisation since the Second Sight report was published.

But Post Office said: “This assertion has been made many times over the past three years, and led in part to Post Office using its communications channels to encourage postmasters to come forward with complaints during a period agreed with the JFSA and Second Sight between December 2012 and February 2013. Any postmaster who came forward during this earlier period also had the opportunity to apply to the Scheme. Despite the publicity this matter has received, there have been only a handful of cases raised outside the scheme by either former or serving postmasters.”

Since the report came to light in April 2015, experts have contacted Computer Weekly with detailed knowledge of the Horizon system, raising questions over the integrity of the Post Office's IT system.

A digital forensics expert hired by solicitors 10 years ago in relation to one case – in which a Post Office subpostmaster was accused of false accounting – said he was shocked the disputes are still going on.

Andy Clark, visiting professor in information security at Royal Holloway University of London and director at information security and expert witness company Primary Key Associates, was called as a witness for the defence in a case brought by the Post Office against a subpostmaster. After seeing the Post Office Horizon accounting system in action, he said it was quickly apparent there were questions to ask about its integrity. After asking the Post Office these questions, the Post Office dropped the case.

Clark said he was shocked the issue remained unresolved.

It was clear to me that there were a lot of questions that needed to be answered about the integrity of the system 

 Andy Clark 

Timestamps, tampering and malware

“Nearly ten years ago I was retained by a firm of solicitors as an expert [digital forensics] witness in a criminal matter relating to accusations made against a subpostmaster. At the heart of the prosecution case was Post Office’s Horizon accounting system.”

He said he accompanied the instructing solicitor on a visit to see the Horizon system in action at a Post Office Training Centre. “Within a matter of one hour it was clear to me that there were sufficient significant issues with the design and implementation of that system to bring the integrity and quality of digital evidence into question – for example the vulnerability of Horizon to undetected infection by malware.”

Clark said he wanted to establish the quality and evidential weight of the material on which the prosecution would rely. “This is normal practice for digital forensics experts in the field and, to do so, I asked preliminary questions at the initial meeting at which I first saw a demonstration of the system, as it was deployed at the time.

“I was particularly interested in the reliability of entries in any audit trails, such as could timestamps be relied upon and could entries have been changed without detection? I learned that the source of timestamps on the system I saw could not be considered reliable, being based purely on the local machine clock that could be manipulated and was not synchronised with any external trusted time reference. 

"I also understood that the audit trails were not protected against tampering, and that there had been problems reported of virus infection on systems in the field.”  

When the solicitor made the observations known to the prosecution, the Post Office dropped the case. “It was clear to me that there were a lot of questions that needed to be answered about the integrity of the system," said Clark. 

"After asking early questions, they dropped the case.

Post Office's digital evidence in doubt

“I planned to investigate these aspects of the system first in my detailed technical examination of the system - but never got the chance to do so, as the prosecution dropped the case in advance of me having that opportunity.”

He said that, unless subpostmasters had the support of experts like himself, there could have been miscarriages of justice. "In the Horizon cases that followed the one where I was retained, I think it would have been vital that the defendants were able to challenge the reliability of any digital evidence to establish the facts of the case to the right level of proof required by the court. I don't know the detail of any subsequent cases, but I worry that, if the evidence was not tested thoroughly, then this may well have led to a miscarriage of justice.”

Another IT expert with detailed knowledge of Horizon said: “I have been following the developments with the subpostmaster cases and cannot hold my peace any more."

He said that, during the period he worked with Horizon, the way it communicated to the central systems could account for some of the problems. “When I worked with the Horizon system, it used a bespoke asynchronous communication system. That means it does not communicate in real time, but does so using a series of messages that are stored, and forwarded, when the network connection is available. This is useful where the network connection is not guaranteed to work all the time (that is, the dial-up/broadband connections to each post office). 

"However, asynchronous messaging means that messages from and to the centre may trip over each other. It is perfectly possible that, if not treated properly, messages from the centre may overwrite data held locally.”

I identified a number of functional issues that needed to be addressed, only to be told that I was highlighting too many problems and that the budget had been spent and changes could not be made

 Former subpostmaster Michael Rudkin 

Post Office sacked working group member

The Horizon system used a version of software known as Riposte, from software company Escher.

Former subpostmaster Michael Rudkin, who ran post offices in Barnsley and Leicester, said in 2004-05 he was part of a working group to address difficulties subpostmasters were having with Riposte. He told Computer Weekly: “I identified a number of functional issues that needed to be addressed, only to be told that I was highlighting too many problems and that the budget had been spent and changes could not be made.” He said: “At the time, as you would expect, programmers at the system supplier Fujitsu were prepared to make the changes.”

Rudkin later became chairman of the negotiating committee of the National Federation of Subpostmasters (NFSP). In 2008 his Post Office had an unexplained loss of over £40,000, which had to be repaid. He was suspended in 2008, re-instated in November 2008, suspended again in January 2009 and the Post Office terminated his contract in 2010.  He has not been able to find work since.

Rudkin and his wife have been referred to the mediation scheme.

The Post Office recently said: “Over the past three years there have been exhaustive investigations which have not found any evidence of systemic problems with the Horizon system. The mediation scheme was set up to address individual complaints and that is what we have gone to great lengths to do – a number are now resolved. The complaints are considered on their facts and substance.”

Following the completion of its investigations, the Post Office announced in March 2015 that it would put forward all remaining cases to mediation, with the exception of those which have been subject to a previous court ruling. "Those cases will continue to be considered on a case-by-case individual basis,” said the Post Office.

If you have been affected by or have any knowledge of the issues in this article, please contact Computer weekly in confidence on [email protected]

Computer Weekly timeline of events 

 

Read more on IT for government and public sector