Don't fall into this trap if you're selling an old hard drive

HGST hard drive

A new study has shown that people selling on their old used hard drives or SSDs aren't taking the proper precautions to fully wipe their data from them, with the obvious danger that the buyer may be able to access their personal information – or indeed corporate data in some cases.

This revelation was made by Blancco Technology Group in a report entitled 'The Leftovers: A Data Recovery Study', which examined some 200 drives purchased from eBay and Craigslist (93% of those were hard drives, the remainder SSDs).

Blancco's digital forensics experts then set to work on the drives and were able to recover at least some residual data from no less than 78% of these pieces of hardware. 67% of the used drives held personally identifiable data, and perhaps even more worryingly, 11% of them still held sensitive corporate data that could be extracted.

The forensics experts were able to extract company emails from 9% of drives, spreadsheets including things like sales projections from 5%, and actual customer data from 3%.

As for the personal information gleaned, photos were recovered from 43% of the drives, social security numbers from 23%, financial data from 21%, and CVs from 10%.

That's a lot of potentially damaging information when it comes to both individuals and businesses.

Not really deleted

The problem here is that most people don't realise that deleting files (and then emptying the recycle bin) doesn't actually delete the data. It may be deleted as far as the OS is concerned, but the data remains on the physical drive until it's overwritten by fresh data.

36% of the used drives simply had files deleted like so, but the most common method of wiping was actually a quick format, which the study found was employed in 40% of cases. But even formatting doesn't actually erase the data from the physical drive, and data is still potentially recoverable.

To ensure that data is truly obliterated from a hard drive or SSD, a secure data erasure method must be employed, which involves actively overwriting all traces of data (usually multiple times to make sure that nothing intelligible remains). Only 10% of the examined drives had been securely wiped.

Pat Clawson, CEO of Blancco Technologies, commented: "In even the most technology-inclined companies today, IT executives and CIOs often put most of their attention, resources and budgets towards tackling data security threats. Our study shows the dangers are just as precarious when data isn't securely and completely erased."

Darren is a freelancer writing news and features for TechRadar (and occasionally T3) across a broad range of computing topics including CPUs, GPUs, various other hardware, VPNs, antivirus and more. He has written about tech for the best part of three decades, and writes books in his spare time (his debut novel - 'I Know What You Did Last Supper' - was published by Hachette UK in 2013).

Latest in Pro
Finger Presses Orange Button Domain Name Registration on Black Keyboard Background. Closeup View
I visited the world’s first registered .com domain – and you won’t believe what it’s offering today
Racks of servers inside a data center.
Modernizing data centers: an efficient path forward
Dr. Peter Zhou, President of Huawei Data Storage Product Line
Why AI commonization is so important for business intelligent transformation and what Huawei’s data storage has to offer
Wix automation
The world's leading website builder aims to save businesses time with new tool
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Latest in News
Google Pixel 8a in aloe green showing
Google Pixel 9a benchmark link teases the performance of the upcoming mid-ranger
Quordle on a smartphone held in a hand
Quordle hints and answers for Monday, March 17 (game #1148)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Monday, March 17 (game #379)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Monday, March 17 (game #645)
Apple iPhone 16 Pro HANDS ON
Leaked iPhone 17 dummy units may have given us our best look yet at all four models
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over