Information Security Alert
What is hidden inside second-hand hard drives?
Two MIT students bought 158 second-hand hard drives and scanned them with commercial recovery software. The results were shocking: only 12 drives had their data completely destroyed. The remaining 146 could recover partial or full data. One drive even contained 5,000 credit card numbers.
This requires no government-grade equipment—only free or low-cost recovery software and patience to dig out confidential data from "formatted" drives.
This study was published in the IEEE Security & Privacy journal and is widely cited in cybersecurity. Similar situations occur daily in second-hand computer markets worldwide.
Testing: Which of the 7 methods are useless?
1. Normal Formatting ➔ ❌ Ineffective
Only marks sectors as "writable." The original data remains intact on the disk and can be recovered via data recovery software.
2. Professional Software Data Erasure ➔ ✅ Effective
Complies with DoD 5220.22-M standards. It is time-consuming but effective.
3. Incineration ➔ ⚠️ Conditional
Hard drives withstand heat up to 80–90°C; normal flames rarely deform platters. It is only effective if platters are completely deformed. It also poses air pollution and safety concerns.
4. Water Submersion ➔ ❌ Ineffective
There is still a chance the data can be recovered.
5. Hammer Impact ➔ ⚠️ Conditional
Every platter must be deformed to be effective. Platters made of aluminum-magnesium alloy or glass are difficult to destroy uniformly, and it cannot leave an audit record.
6. Degaussing ➔ ✅ Effective (Magnetic Media Only)
Uses professional degaussers to demagnetize, which is fast and effective. It is nearly ineffective for SSDs/flash memory.
7. Physical Destruction (Drilling, Deforming, Shredding) ➔ ✅ Effective
Requires ensuring that platters and storage chips are actually destroyed.
