Disposing of IT Assets: “eBay, You Found What on Those Hard Drives?”

By: In: ITAD On: Aug 04, 2016
Disposing of IT Assets: “eBay, You Found What on Those Hard Drives?”

Some organizations dispose of their IT assets by recycling what they can and discarding the rest. For others, this process involves reselling parts that still hold some market value. Although today’s industry has a strong focus on compliance, governance and security, there are still several accounts of sensitive business or personal data falling into the wrong hands due to the improper disposing of IT assets.

As CIO reports, Kessler International conducted a 2009 survey in which it purchased 100 used hard disk drives on eBay. The study found that 40 percent of the purchased drives contained sensitive corporate data and personally identifiable information (PII). Unfortunately, the improper disposal of IT assets continues to be a problem today. As The Register reports, a 2016 study conducted by Blancco Technology Group (BTG) analyzed 200 used hard disk drives that were purchased through the likes of Craigslist and eBay. BTG found that only 10 percent of the drives had undergone a secure data erasure process. Furthermore, 67 percent of the drives contained a wealth of PII such as social security numbers and resumes. Unfortunately, this study shows how a breach can affect both consumer and organizational data. The information on the drives included assets such as company emails, CRM records, sales spreadsheets and product inventory data.

With all the potential data breach risks that come with the process of disposing of your IT assets, you might want to reach out to an experienced service provider to perform a proper and secure media destruction service. However, it’s important to be wary of the provider you choose. As Computerworld reports, a power company found itself in hot water back in 2006 when 84 of its used hard drives were purchased by various parties on eBay. These drives contained detailed power grid diagrams, lawsuit data and employee social security numbers. This situation was a direct result of the fact that the utility company had contracted its asset disposal to an unreliable service provider that resold the drives without performing the necessary erasure procedures.

This public utility company’s experience can be seen as a cautionary tale: You must tread carefully when trusting other companies with your data. That being said, taking on the task of proper IT asset disposition (ITAD) is no small feat, especially when you have a lot of assets. Thankfully, there are some basic tips on how to dispose of IT assets properly. For example, you should always dispose of disk drive data in accordance with the standards laid out by the Department of Defense 5220.2-M, but you should also seek out expert help to ensure that that you’re disposing of IT assets in a compliant, secure manner.

For more information on why secure disposition is important and how to choose a supplier, download our media and IT asset disposition vendor guide and checklist.

How to Safely Dispose of Old Technologies →

Leave A Comment


About the author

      Michele Hope is a 25-year technical marketing writer who is well-versed in the language of enterprise IT platforms and infrastructures. Many high-quality writers require extensive background, lots of up-front time, and significant rewrites before they can offer the right messaging for today's complex IT environments. In contrast, Michele's writing typically requires only minimal revisions, minimal client time, and minimal input from the client's subject matter experts. The majority of her business comes from repeat clients who were highly satisfied with her work.       Since the year 2000, Michele has focused primarily on enterprise storage topics. These include data protection, disaster recovery, virtualization and emerging cloud services. She is just as comfortable speaking (and writing) to CIO audiences as she is to IT managers, network administrators, securities professionals and IT architects. A consummate interviewer, Michele has written for publications like Network World, Computerworld, InfoStor and FedTech Magazine. She has written white papers, case studies, blogs and articles for a variety of Fortune 500 clients. Michele has also co-authored a storage industry book which had her co-author stating, "Michele is a fantastic writer with an innate ability to take complex ideas and describe them in an easily understood manner."