Feeds

Police hard drive sold on eBay

Secrets included FOC

  • alert
  • submit to reddit

The essential guide to IT transformation

A computer hard drive, containing confidential data from the Brandenburg police in Germany, has been auctioned over eBay for €20, according to a report by Spiegel, a leading weekly German newspaper. It was bought by a student.

The used 20GB hard drive capacity contained, according to Spiegel, internal alarm plans on how the Police should handle "specific incidences" such as hostage or kidnapping situations, gave contact names of who to contact in the crisis management group, and tactical orders and analysis of political security situations.

According to the report, such information is strictly confidential and should be available only to top level people of the intelligence services, the head of police, and the executive group around the Minister of Interior Schönbohm.

After a student from the city of Potsdam bought it for €20, without knowing about the sensitive content, Minister Jörg Schönbohm immediately initiated an investigation, to find out how the information ended up being sold over eBay and whether the blame was down to a third party or leaked as part of a criminal act.

This oversight by the Brandenburg Police is not the first time a hard drive sold over eBay has triggered a security breach and publicly exposed an organisation.

Last summer, mobile security specialists Pointsec conducted research to find out how many hard drives they could buy over eBay containing sensitive company information to prove the point that very few companies thoroughly wipe clean or re-format their discs before disposing of them. The first one they bought over eBay for just €8 contained the access and log-in codes to a major financial services group.

Pointsec found that they were able to read seven out of 10 hard drives bought over the internet at auctions such as eBay, for less than the cost of a McDonald's meal, all of which had supposedly been wiped-clean or re-formatted.

Peter Larsson, CEO of Pointsec Mobile Technologies, said "Even when companies or individuals believe they have wiped the hard drive clean, it is blatantly clear how easy it is to retrieve sensitive information from them both during their current lifetime and beyond it."

He added that this week's exposure of leaked and highly critical information from the Brandenburg police in Germany "reinforces how important it is to never let mobile devices or hard drives leave the office without being adequately protected with encryption and strong password protection – even after they have been discarded."

Pointsec recommends that, if the data on your old equipment is not encrypted, make sure that you re-format the device at least eight times before disposal, or use professional "wiping-clean" software to erase the data. It adds that, if the information is very sensitive and you want to ensure that not even the cleverest hacker will ever be able to read the old hard drive, burn it.

Copyright © 2005, OUT-LAW.com

OUT-LAW.COM is part of international law firm Pinsent Masons.

Next gen security for virtualised datacentres

More from The Register

next story
Ice cream headache as black hat hacks sack Dairy Queen
I scream, you scream, we all scream 'DATA BREACH'!
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
Researchers camouflage haxxor traps with fake application traffic
Honeypots sweetened to resemble actual workloads, complete with 'secure' logins
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
New Snowden leak: How NSA shared 850-billion-plus metadata records
'Federated search' spaffed info all over Five Eyes chums
Three quarters of South Korea popped in online gaming raids
Records used to plunder game items, sold off to low lifes
Oz fed police in PDF redaction SNAFU
Give us your metadata, we'll publish your data
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up Big Data
Solving backup challenges and “protect everything from everywhere,” as we move into the era of big data management and the adoption of BYOD.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?