Secure Data Recovery, a renowned data recovery specialist, has conducted an exclusive project for TechRadar Pro, uncovering a startling discovery: millions of deleted files have been successfully recovered from hard drives purchased online.
The company acquired 100 hard drives at random (excluding solid-state drives and memory cards) and implemented reasonable data recovery techniques to assess their findings — it is worth noting that they did not invest resources into recovering data from damaged or encrypted secure drives, as those cases were deemed salvageable.
Out of the 100 hard drives acquired, Secure Data Recovery managed to recover data from an impressive 69 drives, encompassing 30 damaged HDDs and a single encrypted drive. It is noteworthy that none of the drives were hybrid models that combine solid-state memory with traditional spinning drives.
The majority of users lack comprehensive plans for securely disposing of old or obsolete hard drives. (Image: “Hard Drive” by wwarby)
The data recovery process resulted in an astonishing total of over 5.7 million recovered files, with a significant contribution from a single hard drive containing a staggering 3.1 million files. Among the recovered drives, the oldest model dated back to 2004, a 2.5-inch Western Digital variant, while the majority of the drives purchased were 3.5-inch models.
This enlightening outcome sheds light on a prevalent issue: the majority of users lack comprehensive plans for securely disposing of or erasing data from old or obsolete hard drives (particularly those utilizing PATA or SCSI interfaces).
Consequently, a significant number of users dispose of hard drives without properly eliminating sensitive files, while others merely delete them without employing robust data erasure methods. Surprisingly, only a minute fraction of users (merely 1% in the research) take the extra step of encrypting their entire drives to safeguard their data.
A warning is given on eBay urging sellers to thoroughly wipe laptops and storage devices before selling them. (Image: “Disassembled Hard Drive” by Numinosity by Gary J Wood)
The project’s results also indicate that years of warnings issued by eBay, urging sellers to thoroughly wipe laptops and storage devices before selling them, have largely gone unheeded.
Sanitizing a hard drive
A spokesperson from Secure Data Recovery clarified that a hard drive is considered “sanitized” if no recoverable data is found, implying that it has either been completely wiped or filled with random patterns, such as the Department of Defense’s three-pass method.
Importantly, the spokesperson assured that after the recovery process, the company followed its rigorous data-handling practices, encompassing more than 100 security controls — they emphasized that at no point did they access the contents of any recovered file, and the data was securely purged after the completion of the project.
Jake Reznik, the esteemed Laboratory Operations Manager at Secure Data Recovery, shared his expertise on the safe and secure disposal of hard drives, whether they are internal or external; Reznik recommends that users back up important files before initiating the sanitization process to prevent any potential data loss.
This can be achieved through the use of backup software or by opting for a reliable cloud backup service; he advises selecting an appropriate destruction method based on individual requirements — for instance, erasure software offers a reusable hard drive by overwriting the original data with multiple passes of random patterns.
It is essential to verify that the selected program has effectively wiped all data to ensure complete erasure.
Irreversible destruction methods
Alternatively, there are some irreversible destruction methods that can render hard drives completely irreparable:
- Degaussing: utilizes a powerful magnetic field to demagnetize the platters and scramble existing data.
- Media shredding: involves running the hard drive through a device that tears its components into small metal pieces.
- Disintegration: commonly employed by enterprises, reduces the hard drive to a fine residue by reducing particle size
- Puncturing: puncturing the drive’s platters in multiple spots using a drill.
In general, physical destruction methods offer a higher level of security for hard drive disposal. Some individuals opt for a combination of destruction methods to ensure the absolute irrecoverability of their data. For optimal results and peace of mind, consult a professional service specializing in safe hard drive destruction
Filed in ..