ICO sounds alarm over second-hand hard drives

Data protection watchdog claims more than 10 per cent of sold-on hard drives contain previous owner's data.

Hard drive

More than one in ten second-hand hard drives contains recoverable data belonging to the original owner, claims research from the Information Commissioner's Office.

The data protection watchdog asked computer forensics firm, NCC Group, to acquire 200 hard drives, 20 memory sticks and 10 mobile phones from online auctions and trade fairs.

The haul of devices was then trawled through using freely available forensics tools. It was then discovered that 11 per cent of the hard drives contained personal data from the previous owner.

At least two thirds of the drives contained enough information - including bank statements, passports and medical records - for criminals to steal the owner's identity.

Christopher Graham, the Information Commissioner, said: "We live in a world where personal and company information is a highly valuable commodity. It is important that people do everything they can to stop their details from falling into the wrong hands.

"Today's findings show that people are in danger of becoming a soft touch for online fraudsters simply because organisations and individuals are failing to ensure the secure deletion of the data held on their old storage devices."

Graham Cluley, senior technology consultant at security vendor Sophos, said the deletion of data on old devices is not always the responsibility of the previous owner.

"It can be that they've trusted a third party organisation to handle the secure disposal of assets," he said. "But it's always us, the unfortunate member of the public, who is most exposed by the sloppy practice."

He said, although many companies go to great lengths to dispose of old computer equipment responsibly, there's clearly still more work to be done.

"Once again, it's time for users and companies to consider the benefits of fully encrypting their hard drives as well as getting in the habit of securely wiping drives as they are junked," Cluley added.

Featured Resources

Unlocking collaboration: Making software work better together

How to improve collaboration and agility with the right tech

Download now

Four steps to field service excellence

How to thrive in the experience economy

Download now

Six things a developer should know about Postgres

Why enterprises are choosing PostgreSQL

Download now

The path to CX excellence for B2B services

The four stages to thrive in the experience economy

Download now

Recommended

Best data recovery tools 2021: Restore your lost files
data recovery

Best data recovery tools 2021: Restore your lost files

18 Mar 2021
Best data recovery tools 2020: Restore your lost files
data recovery

Best data recovery tools 2020: Restore your lost files

7 Dec 2020
MPs turn on the ICO over contact-tracing fiasco
Information Commissioner

MPs turn on the ICO over contact-tracing fiasco

21 Aug 2020
Hundreds of thousands of Instacart customers impacted by data breach
phishing

Hundreds of thousands of Instacart customers impacted by data breach

23 Jul 2020

Most Popular

Microsoft is submerging servers in boiling liquid to prevent Teams outages
data centres

Microsoft is submerging servers in boiling liquid to prevent Teams outages

7 Apr 2021
Hackers are using fake messages to break into WhatsApp accounts
instant messaging (IM)

Hackers are using fake messages to break into WhatsApp accounts

8 Apr 2021
How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

8 Apr 2021