Hard drives bought on e-Bay contain sensitive personal, corporate data
Forty per cent of the hard drives purchased on eBay by a New York computer forensics firm contained sensitive information – everything from corporate financial data to the Web-surfing history and downloads of a man with a foot fetish.2/11/2009 6:39:00 AM By: Lucas Mearian and Sharon Fisher
A New York computer forensics firm has found that 40 per cent of the hard disk drives it recently purchased in bulk orders on eBay contained personal, private and sensitive information – everything from corporate financial data to the Web-surfing history and downloads of a man with a foot fetish.
Kessler International conducted the study over a six-month period, buying up disk drives ranging in size from 40GB to 300GB from Canada and the U.S.
The firm, which completed its research about two weeks ago, bought a total of 100 relatively modern drives, the vast majority of them Serial ATA.
"With size of the sample, I guess we were surprised with the percentage of disks that we found data on," said Michael Kessler, CEO of Kessler International.
"We expected most of the drives to be wiped – to find one or two disks with data. But 40 drives out of 100 is a lot."
Kessler believes the drives were likely from computers sold to third-party resellers who took them apart and sold off the parts.
Kessler's engineers had to use special forensics software to retrieve data from some of the hard drives, but other drives contained sensitive data in the clear, having never been overwritten or erased.
The data included personal documents, financial information, e-mails, DNS server information and photographs.
"The average person who knows anything about computers could plug in these disks and just go surfing," Kessler said.
Page Navigation 1) "We expected to find one or two disks with data. 40 drives out of 100 is a lot." – Page 12) "I know they found a guy's foot fetish on one disk." – Page 2
3) Before selling an old PC, format the drive and overwrite. – Page 3
<< Back
Line of Business
