Companies usually focus on securing the data on the electronic devices used in their day-to-day operations. However, it’s important to realize that once these devices are no longer in use, they pose a data security threat if they aren’t disposed of properly. After all, they still may contain a wealth of information that could be stolen.
Why Tossing Your Hard Drive Doesn’t Really Get Rid of Data
- Data exists forever. When a file is deleted from a hard drive, it isn’t actually erased. As long as the hardware still exists, the sensitive data on it is available for misuse. Failing to include old computer hard drives and external hard drives in your information security strategies increases the risk of a security breach. And that could lead to major financial, reputational, and compliance ramifications.
- ‘Inoperable’ doesn’t matter. No matter how old or broken-down computer hardware is, data files remain intact, and software exists that can recover them. That’s why it’s important to remove and securely destroy the hard drive before tossing, donating, or recycling equipment.
- Recycling isn’t about security. You should always destroy hard drives or other electronic devices before recycling because there is no way to ensure that equipment sent for recycling will not be accessed by information thieves. The traditional recycling process doesn’t follow a secure chain of custody that a qualified data destruction company provides in handling and completely destroying hard drives and data.
- The destruction method is critical. You may read about some do-it-yourself (DIY) ways of destroying a hard drive, but the best way to permanently remove data from an old drive is to outsource the job to a secure shredding and destruction service provider. A professional hard drive destruction service uses specialized shearing equipment to slice the hard drive into small pieces, and crushing equipment is used to punch an irreparable hole through each drive and destroy magnetic surfaces.
Why Is Wiping or Reformatting Technology a Poor Data Security Strategy?
Wiping, degaussing, or reformatting a hard drive or other electronic device doesn’t completely remove data from the device – and forensic software programs can recover the information.
A quick Internet search reveals countless instructional blogs and videos that walk through the data recovery process. Although these are aimed at people who accidentally wipe or reformat their machines, the same strategies can be used by bad actors to access private and confidential data from discarded equipment. You should always destroy hard drives or other electronic devices before recycling because there is no way to ensure that equipment sent for recycling will not be accessed by information thieves.
A common misperception is that magnets placed on or near a hard drive will destroy the stored data. While this may have worked in the past, today’s technology is more advanced. Even if a magnet is able to corrupt the data, it may be possible to repair the information.
Is Locking Up Legacy Technology a Viable Strategy?
If your company is unsure how to properly destroy hard drives, you may choose to stockpile these items in a locked cabinet or storage area. However, this introduces risks as well because the sensitive information remains on the equipment and can still be stolen.
What Is the Best Way to Destroy a Hard Drive?
Physically destroying hard drives is the only 100% secure way to permanently remove data from the technology. DIY destruction isn’t recommended. Although you could take a hammer to the equipment, it’s neither reliable nor prudent and poses safety risks. A better choice is having it physically destroyed by a professional hard drive destruction service like Shred-it®.*
Proof of destruction is necessary.
Only a professional shredding and destruction service provider will issue a certificate of hard drive destruction after each service. This official document is proof that IT assets are managed properly, ensuring that data is destroyed. This is important for compliance purposes and proves to inspectors, regulatory officials, and clients that data has been destroyed completely.
What Is the Difference between Shearing and Crushing?
Shearing and crushing are two methods of physically destroying technology so data can’t be retrieved or reconstructed.
- Shearing: Shearing slices the entire hard drive into small pieces with 40,000 lbs. of destructive force. The process completely obliterates the drive platters, mechanisms, and electronic components.
- Crushing: Crushing involves punching an irreparable hole through each hard drive with 7,500 lbs. of force pressure. This also destroys drive platters, rippling and fracturing the magnetic surfaces.
The Benefits of Using Shred-it® Hard Drive Destruction Service
- A variety of services, including regularly scheduled pickups or onsite service, which allows you to see physical hard drive destruction, or off-site, at the Shred-it® facility near you
- A secure chain of custody at every touchpoint to keep your data secure throughout our shredding process
- A certificate of hard drive destruction after each service
- Material is securely recycled with local partners
- Shred-it® specialists will work with your business to personalize services that best meet your business needs
Hard drive destruction is an important and often overlooked aspect of information security. Learn more about how Shred-it® can help you and your company properly dispose of old hard drives.
*Contact Shred-it® for service availability.
**This article is for general information purposes only and should not be construed as legal advice on any specific facts or circumstances.