Are you sure you wiped your hard drive properly?

1 October 2019 Information Security, Security Services & Risk Management

Have you ever seen a hacker movie? When the other shoe drops, you can see the black hat scrambling for their computer, tearing out the hard drive and trying to erase them. They may even run neodymium magnets over them and then finish the job by driving an electric drill directly through the platters of the drives. Alternatively, they just smash it with a hammer and hope for the best, says Carey van Vlaanderen, CEO at ESET South Africa.


Carey van Vlaanderen, CEO at ESET South Africa.

Rest assured, you really do not have to go about smashing your hard drives left and right, but you should always ensure the security and privacy of your data under all circumstances – a point made even clearer by a recent study.

Commissioned by Comparitech and conducted by the University of Hertfordshire, the study sought to find out how thorough we are when it comes to wiping our hard drives before we sell them. Turns out, many of us are not very thorough. Or at all.

The researchers performed a series of tests on a sample of 200 second-hand hard drives that had been bought off online marketplaces and various merchants. They found almost 60% of these hard drives still contained some information stored on them by the former owners.

The leftover information included sensitive data that could be exploited by bad actors. The data ranged from official documents such as scans of passports and driver licenses, through bank statements and tax documents to visa applications and even photos of an intimate nature. The list of documents uncovered on these hard drives is much more varied, but this is just to illustrate how much sensitive data you may store on your hard drives, and without giving it much thought.

On the other hand, although it may look like the owners are indifferent towards securing their data, the study shows otherwise. The former owners did try to wipe their data, they just failed to do so securely. Only 26% of the drives were wiped properly and no data could be recovered from them, while another 16% were not accessible and could not be read. As for the rest, the data could be recovered with varying degrees of difficulty.

Worryingly, one in six people made no attempt whatsoever to wipe the data.

A similar study was conducted in 2007. Back then, the amount of recoverable data from second-hand HDDs was significantly lower. What’s more, in the older study a considerable number of the drives ended up being unreadable. Observing the rising trend of data being easily recoverable from second-hand drives, sellers should be more careful.

You can always take preventative measures, with the simplest being encrypting your hard drive so you can rest easy if you ever lose it. When it comes to wiping the hard drive you want to sell, you can check the website of your hard drive’s manufacturer, that should contain tools to help you manage the wiping process properly. Before you proceed, however, make sure you have backed up all the data you want to keep.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...
World-first safe K9 training for drug detection
Technews Publishing SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Government and Parastatal (Industry)
The Braveheart Bio-Dog Academy recently announced the results of its scientific research into training dogs to accurately detect drugs and explosives without harming either the dogs or their handlers.

Read more...
Five tech trends shaping business in 2025
Information Security Infrastructure
From runaway IT costs to the urgent need for comprehensive AI strategies that drive sustainable business impact, executives must be prepared to navigate a complex and evolving technology environment to extract maximum value from their investments.

Read more...
Kaspersky’s predictions for 2025 APT landscape
Information Security
The 2025 advanced persistent threat (APT) includes the rise of hacktivist alliances, increased use of AI-powered tools by state-affiliated actors – often with embedded backdoor – more supply chain attacks on open-source projects.

Read more...
SecurityHQ certified B-BBEE Level 1: Delivering global services from a local entity
SecurityHQ Information Security
SecurityHQ, a global managed security services provider (MSSP) with an office in South Africa, has announced it can now offer local companies a complete managed cybersecurity service from a Level-1 B-BBEE accredited and 51% black-owned service provider.

Read more...
2024, the year of Fraud-as-a-Service
Information Security
A report from AU10TIX outlines how ‘the industry’s dark engine’ offers user-friendly fraud kits that enable amateurs to execute complex attacks against thousands of accounts in minutes.

Read more...
The future of endpoint security
Information Security
Endpoint security is a critical pillar of cybersecurity, especially for South African businesses, which are becoming prime targets for cybercriminals. Endpoint security involves safeguarding devices connected to a network from a range of cyberthreats.

Read more...
Not enough businesses take cybercrime seriously
Information Security
Interpol recently revealed that cybercrime, specifically ransomware incidents, cost the South African economy up to 1% of the country’s GDP, while the Council for Scientific and Industrial Research estimated the loss at R2,2 billion a year.

Read more...