Jeremy Clarkson scoffed at the UK Government data leak debacle, and published his bank details in The Sun:
"All you'll be able to do with them is put money into my account. Not take it out. Honestly, I've never known such a palaver about nothing," he told readers.
But he was proved wrong, as the 47-year-old wrote in his Sunday Times column.
"I opened my bank statement this morning to find out that someone has set up a direct debit which automatically takes £500 from my account," he said.
"The bank cannot find out who did this because of the Data Protection Act and they cannot stop it from happening again.
"I was wrong and I have been punished for my mistake."
Police were called in to search for the two discs, which contained the entire database of child benefit claimants and apparently got lost in the post in October 2007.
They were posted from HM Revenue and Customs offices in Tyne and Wear, but never turned up at their destination - the National Audit Office.
The loss, which led to an apology from Prime Minister Gordon Brown, created fears of identity fraud.
Clarkson now says of the case: "Contrary to what I said at the time, we must go after the idiots who lost the discs and stick cocktail sticks in their eyes until they beg for mercy."
I'm amazed that the normally combative Clarkson has accepted this feeble excuse from his bank, when they have just handed out a huge sum of his money to someone else against his wishes, revealing that they are failing in their primary purpose of keeping money safely.
That their security process can fail spectacularly in this way, enabling fraudsters to siphon off money, is sadly all too common.
What is notable is that the banks have spent enormous sums of money promoting the concept of 'identity theft' through clever TV adverts, diverting their customers' attention from their security cock-ups, despite the fact that they are liable for the fraudulently dispersed funds. I don't understand why the banks continue to use "mothers maiden name" as default password, and enable debits this way, then hide behind data protection legislation when their error is pointed out. Clarkson should be railing at the idiots at his bank, too.