Who wants corporate data? Cheap Sale! Part 2

[The text was translated automatically by Google Translate] Website zaufanatrzeciastrona.pl reported that despite the promise made by PKO BP "After the findings of PKO Polish Bank will take further effective measures to eliminate the possibility of similar cases in the future," continues the auction you can still buy the unit of the bank. The problem of control over utylizowanymi appliances, however, has a number of other companies in the world. Web users inform, that "Even corporations with FTSE outsource disposal of external hardware to outside companies, which take the equipment, and then it appears... [for example] on the Polish Allegro".

In August 2013 we reported an interesting find of a person who for a very low price bought on auction used and damaged Cisco router, which, as it turned out, belonged to the PKO BP. It is true that the files present on it were out of date and not worth much to the public (unless you want the break-in to the network of the bank to know her a little better and maybe use for evil), and the bank promised to take effective steps to protect the recycling process , but apparently the effects of these actions has not yet come, because at the next auction recently found a router with two years younger configuration (in 2011 instead of 2009).

Anyway, the appearance of the sale of the router has stimulated people to share some very interesting stories, which we quote:

"Radbard: Pretty standard – I've once won a tender for the "used" computers from municipal hospital... they (IT staff) was so lazy, that they did not removed the disks, or even bashing format. I had access to all the data on the disks (date treatments, test results, patient records)."

"Dinth: Abroad there's no difference. Even corporations with FTSE outsource disposal of external hardware to outside companies, which take the equipment, and then it appears... [for example] on the Polish Allegro".

How is it that the external company that should dispose of the equipment, sell it?

In our experience, there are three main reasons:

  • time
  • costs
  • lack of awareness

To be sure, that certainly destroyed appropriate media need to spend quite a lot of time. First, you need to prepare a list of destroyed vehicles, write down their address details (from nature, or from internal documents) and at least collect them in one place. It all takes quite a lot of time, especially if the media is to destroy hundreds or thousands (and, contrary to appearances, these are not some exceptional cases, but fairly standard situation). After disposing of the company should instead be verification of identification data (such as a serial number) received media - that the client had external confirmation that destroyed the appropriate media. Verification, although usually less time than absorbing inventory, also sometimes can take a few or several hours.

This makes it sometimes employees do not have a proper awareness of the validity of these measures ("in the end what could happen? It's only computer scrap") so they refrain from performing these steps. And thus save time and money - rendering companies when they can just pick up media, or just converting them, are able to offer really low rates disposal. But what happens next?

http://zaufanatrzeciastrona.pl/ quotes on someone who supposedly knows the ins and outs of dealings reselling used equipment without the proper disposal of the information. Information provided by him are frightening, but at the same time - very likely.

"Bank announces tender for the disposal of computer equipment. One of the major Polish companies with foreign-sounding name, engaged in this activity, wins the tender. Company has all the necessary qualifications and authorizations for the transport of waste, storage, disposal and recycling. According to the agreement the company has to make disposal and recycling, or equipment dismantled, to share materials and grind to recover non-ferrous metals. In fact, utilizing the company sells some goods, suitable for further processing, the company Infodruk of Bialystok. Selected palette hardware then go to Bialystok where employees carry out the segregation range . Isolation of devices are running that you only need to clean up before the sale of such repair or complete one of three acting spoiled. Due precision equipment are removed stickers or other signs of the previous holder. Yet some time ago company employed person whose task was to clear all data from devices sold, but now the stage of preparation for sale is skipped. Ready equipment lands on the Allegro and the company begins to pray that acted from 3 to 6 months (because so usually provide guarantees.) in this way were placed in the hands of Internet users not only routers or other network devices, but also the printer and photocopier that scans hard drives contained evidence or contracts and even whole computer disks containing all possible data. entire dealings takes place in a smooth manner for at least 10 years."

Casings of drives after removing the platesIt is worth noting that speaking about the hard disk as a medium, is only a mental shortcut. In fact, data carriers in your drive plates (and, possibly, memory) - and this is what it must be destroyed in order to delete the data. Aluminum casing, magnets, screws, wires, or plastic materials present in the chassis, while materials are perfectly suitable for recycling. The recovery of such materials is supremely worthy of recognition - in the face of declining globally available rare earth metals, it is a good way to recover valuable elements. Also - if you can fix any one device, completing it with three or four other - it is also difficult to discern here something negative - it is the fulfillment of the idea of ​​recycling.

If, however, in preparing the equipment used in the media, who pledged to destroy - this is a completely different matter. It is not only a blatant violation of the provisions of Polish law requiring irreversible destruction of data, but also abuse customer confidence and confirmation of untruth (on the Protocol and / or Certificate of Destruction).

So what can you do to make the best possible safeguard against losing data during disposal? Definetely not settling for just correctness from the documentary, but check every step of service and up to limit the chances of fraud. It should also choose the method that will completely destroy even the smallest piece of media - in the light of ever-increasing ability to recover data even from tiny fragments of the disc, it is becoming more and more appropriate choice. One such method employs LiquiDATA technology, which makes destroyed dissolve in media devoid of magnetic properties, organic liquid, from which it is impossible to recover any data. It is also the only currently available completely effective data destruction technology which avoids the risk of transport - the destruction process can take place at the customer's premises.

source for photo at the beginning of the article: english Wikipedia, author: Coolcaesar

Certyfikowany Instytut Niszczenia Danych Sp. z o.o.
ul. Stanów Zjednoczonych 4, 54-403 Wrocław
Al. 1 Maja 87, 90-755 Łódź

+48 717 237 000