ICO sounds alarm over second-hand hard drives
Data protection watchdog claims more than 10 per cent of sold-on hard drives contain previous owner's data.


More than one in ten second-hand hard drives contains recoverable data belonging to the original owner, claims research from the Information Commissioner's Office.
The data protection watchdog asked computer forensics firm, NCC Group, to acquire 200 hard drives, 20 memory sticks and 10 mobile phones from online auctions and trade fairs.
The haul of devices was then trawled through using freely available forensics tools. It was then discovered that 11 per cent of the hard drives contained personal data from the previous owner.
At least two thirds of the drives contained enough information - including bank statements, passports and medical records - for criminals to steal the owner's identity.
Christopher Graham, the Information Commissioner, said: "We live in a world where personal and company information is a highly valuable commodity. It is important that people do everything they can to stop their details from falling into the wrong hands.
"Today's findings show that people are in danger of becoming a soft touch for online fraudsters simply because organisations and individuals are failing to ensure the secure deletion of the data held on their old storage devices."
Graham Cluley, senior technology consultant at security vendor Sophos, said the deletion of data on old devices is not always the responsibility of the previous owner.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"It can be that they've trusted a third party organisation to handle the secure disposal of assets," he said. "But it's always us, the unfortunate member of the public, who is most exposed by the sloppy practice."
He said, although many companies go to great lengths to dispose of old computer equipment responsibly, there's clearly still more work to be done.
"Once again, it's time for users and companies to consider the benefits of fully encrypting their hard drives as well as getting in the habit of securely wiping drives as they are junked," Cluley added.
Rene Millman is a freelance writer and broadcaster who covers cybersecurity, AI, IoT, and the cloud. He also works as a contributing analyst at GigaOm and has previously worked as an analyst for Gartner covering the infrastructure market. He has made numerous television appearances to give his views and expertise on technology trends and companies that affect and shape our lives. You can follow Rene Millman on Twitter.
-
Cleo attack victim list grows as Hertz confirms customer data stolen
News Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
By Ross Kelly
-
Lateral moves in tech: Why leaders should support employee mobility
In-depth Encouraging staff to switch roles can have long-term benefits for skills in the tech sector
By Keri Allan
-
Sustainability is more than a flash-in-the-pan topic for the data storage industry
Analysis Rising energy costs and concerns over the environmental impact of data centers are prompting a shift away from power-hungry disk drives
By Ross Kelly
-
HDD vs SSD: Which storage solution is best for you?
Vs You can have your storage cheap and slow or fast and pricey
By Rene Millman
-
WD Red 6TB review
Reviews A high quality HDD that makes for fast NAS drives, but the price could be more competitive
By David Ludlow
-
Toshiba N300 High-Reliability Hard Drive review
Reviews A powerful and well-priced hard disk designed for NAS devices, but smaller capacities would be good to see
By David Ludlow
-
How to choose the right disk utility
In-depth Steve Cassidy provides some practical guidance as to how to ensure you make the right decision when it comes to disk utilities...
By Steve Cassidy
-
EMC reaffirms flash storage commitment
News Storage giant hints at new flash offerings to be unveiled later this year.
By Jane McCallion
-
Google Glass must be built with privacy in mind, warns ICO
News Data protection watchdog said it's Google's responsibility to ensure augmented reality glasses comply with privacy laws.
By Caroline Donnelly
-
Toshiba unveils 4TB hard disk drive
News Latest hardware has been optimised to meet enterprise and cloud service provider storage needs, company claims.
By Jane McCallion