ICO sounds alarm over second-hand hard drives
Data protection watchdog claims more than 10 per cent of sold-on hard drives contain previous owner's data.


More than one in ten second-hand hard drives contains recoverable data belonging to the original owner, claims research from the Information Commissioner's Office.
The data protection watchdog asked computer forensics firm, NCC Group, to acquire 200 hard drives, 20 memory sticks and 10 mobile phones from online auctions and trade fairs.
The haul of devices was then trawled through using freely available forensics tools. It was then discovered that 11 per cent of the hard drives contained personal data from the previous owner.
At least two thirds of the drives contained enough information - including bank statements, passports and medical records - for criminals to steal the owner's identity.
Christopher Graham, the Information Commissioner, said: "We live in a world where personal and company information is a highly valuable commodity. It is important that people do everything they can to stop their details from falling into the wrong hands.
"Today's findings show that people are in danger of becoming a soft touch for online fraudsters simply because organisations and individuals are failing to ensure the secure deletion of the data held on their old storage devices."
Graham Cluley, senior technology consultant at security vendor Sophos, said the deletion of data on old devices is not always the responsibility of the previous owner.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"It can be that they've trusted a third party organisation to handle the secure disposal of assets," he said. "But it's always us, the unfortunate member of the public, who is most exposed by the sloppy practice."
He said, although many companies go to great lengths to dispose of old computer equipment responsibly, there's clearly still more work to be done.
"Once again, it's time for users and companies to consider the benefits of fully encrypting their hard drives as well as getting in the habit of securely wiping drives as they are junked," Cluley added.
Rene Millman is a freelance writer and broadcaster who covers cybersecurity, AI, IoT, and the cloud. He also works as a contributing analyst at GigaOm and has previously worked as an analyst for Gartner covering the infrastructure market. He has made numerous television appearances to give his views and expertise on technology trends and companies that affect and shape our lives. You can follow Rene Millman on Twitter.
-
What is polymorphic malware?
Explainer Polymorphic malware constantly changes its code to avoid detection, making it a top cybersecurity threat that demands advanced, behavior-based defenses
-
Outgoing Kaseya CEO teases "this is just the beginning" for the company
Opinion We spoke to Fred Voccola who remains a key figurehead at the firm as it enters its next chapter...
-
Sustainability is more than a flash-in-the-pan topic for the data storage industry
Analysis Rising energy costs and concerns over the environmental impact of data centers are prompting a shift away from power-hungry disk drives
-
HDD vs SSD: Which storage solution is best for you?
Vs You can have your storage cheap and slow or fast and pricey
-
WD Red 6TB review
Reviews A high quality HDD that makes for fast NAS drives, but the price could be more competitive
-
Toshiba N300 High-Reliability Hard Drive review
Reviews A powerful and well-priced hard disk designed for NAS devices, but smaller capacities would be good to see
-
How to choose the right disk utility
In-depth Steve Cassidy provides some practical guidance as to how to ensure you make the right decision when it comes to disk utilities...
-
EMC reaffirms flash storage commitment
News Storage giant hints at new flash offerings to be unveiled later this year.
-
Google Glass must be built with privacy in mind, warns ICO
News Data protection watchdog said it's Google's responsibility to ensure augmented reality glasses comply with privacy laws.
-
Toshiba unveils 4TB hard disk drive
News Latest hardware has been optimised to meet enterprise and cloud service provider storage needs, company claims.