Used copier for sale — sensitive documents included
May 11, 2010 by Steve HannafordPosted in: Security, Special Report

We’ve covered it before, but the tale of the all-too-vulnerable copier hard drive keeps coming up, this time in a recent CBS News exposé.
Investigative reporters bought four random copiers from a New Jersey used office equipment dealer. When they checked out the hard drives, they found that two of the copiers had been owned by the Buffalo, NY, police department.
And on the disks were a number of shockingly confidential police files, including lists of wanted sex offenders, details of domestic-violence complaints and lists of targets in a drug ring investigation.
The two other copiers also had confidential information, One, from a construction company, had lists of employees and their social security numbers. The second, which had been used by an insurance company, had confidential medical records of its customers.
In every case, the data was unencrypted, and not password-protected. And getting access to the data took only a little expertise and software tools available online.
What’s amazing is that all four randomly selected copy machines had data that would be of interest to prying eyes, information which would leave their former owners open to lawsuits.
The lesson is that, unknown to most people, most copier-multifunctionals in the workplace today come with hard drives, and they store jobs you print or scan, without users being aware of it. When the lease expires and the old copier is traded in, most users do not take any steps to clear off that data, and thus leave themselves open to embarrassment, fraud and legal action.
Watch the video of the CBS report here.
DocuCrunch.com delivers the latest IT and Imaging news once a week to the inboxes of over 200,000 IT and Imaging professionals.
Click here to sign up and start your FREE subscription to DocuCrunch!
Tags: copiers, hard drive, identity theft, leasing


May 18th, 2010 at 12:46 pm
[...] (MFPs) have caused a big buzz lately, and we’ve followed suit on this site (see here and here). But are those security problems really the companies’ [...]
May 25th, 2010 at 6:01 am
[...] the wild after they’ve been used to scan sensitive documents (which we covered previously here), 68% of companies don’t wipe data from copy machines when they’re decommissioned, [...]