April 2017 Digital Edition

Click Here

March 2017 Digital Edition

Click Here

Feb. 2017 Digital Edition

Click Here

January 2017 Digital Edition

Click Here

Nov/Dec 2016 Digital Edition

Click Here

Oct 2016 Digital Edition

Click Here

Technology Sectors

Market Sectors

Study: Personal information found on 40 percent of used mobile devices sold in U.S.

PHOENIX March 24, 2017 The National Association for Information Destruction® (NAID®) announced today the results of the largest study to date of the presence of personally identifiable information (PII) on electronic devices sold on the second hand market. The study showed that 40 percent of devices resold in publicly-available resale channels contained PII. NAID commissioned CPR Tools, Inc. to analyze the used devices, which included used hard drives, mobile phones and tablets.

The current state of electronic storage has made it possible for nearly every adult to carry a form of data storage device. "As data storage is included in nearly every aspect of technology today, so is the likelihood of unauthorized or unintended access to that data," states CPR Tools CEO, John Benkert. He goes on to say, "Auction, resell, and recycling sites have created a convenient revenue stream in used devices; however, the real value is in the data that the public unintentionally leaves behind."

While there have been similar studies over the past decade, the NAID study is unique insofar as the recovery process used to locate the data on more than 250 devices was, by design, not sophisticated nor was advanced forensic training required. All methods leveraged downloadable shareware.

Robert Johnson, NAID CEO, points out that while this study's results show a decrease in data found compared to past studies, "NAID employed only basic measures to extract data; imagine if we had asked our forensics agency to actually dig!" He goes on to surmise that "40 percent is horrifying when you consider the millions of devices that are recycled annually."

PII recovered included credit card information, contact information, usernames and passwords, company and personal data, tax details, and more. While mobile phones had less recoverable PII at 13%, tablets were disturbingly found with the highest amount at 50%. PII was also found on 44% of hard drives. In total, 40% of the devices yielded PII. The study included devices that had been previously deployed in both commercial and personal environments.

Johnson cautions that the results are in no way an indictment of reputable commercial services providing secure data erasure. "We know by the ongoing audits we conduct of NAID Certified service providers that when overwriting is properly done, it is a trustworthy and effect process. The problem lies with service providers who are not qualified and, too often, with businesses and individuals who feel they can do it themselves," he said.

ABOUT NAID

The National Association for Information Destruction (NAID) is the international watchdog and non-profit trade association of the secure destruction industry, which currently represents more than 1,900 member locations globally. NAID advocates for a standard of best practices across governments and by service providers as well as suppliers of products, equipment and services to destruction companies. The mission of NAID is to promote the proper destruction of discarded information through education and to encourage the outsourcing of destruction needs to qualified contractors. For more information visit http://www.naidonline.org.

 

Recent Videos

HID Global is opening the door to a new era of security and convenience.  Powered by Seos technology, the HID Mobile Access solution delivers a more secure and convenient way to open doors and gates, access networks and services, and make cashless payments using phones and other mobile devices. ...
Mobile device forensics can make a difference in many investigations, but you need training that teaches you how to get the most out of your mobile forensics hardware and software, and certifies you to testify in court. Read this white paper to learn how to evaluate mobile forensics training...
PureTech Systems is a software company that develops and markets PureActiv, its geospatial analytics solution designed to protect critical perimeters and infrastructure.  Its patented video analytics leverage thermal cameras, radars and other perimeter sensors to detect, geo-locate, classify, and...
PureTech Systems is a technology leader in the use of geospatial video, focusing on perimeter security.  When combining geospatial capabilities with video analytics and PTZ camera control, managers of critical facilities can benefit by allowing the video management system to aid them in the process...