We distributed NAID’s findings earlier this year on the risks associated with recycling computer equipment. Avast (a security software company) has now conducted a study on mobile phones and private information left behind on mobile phones bought through eBay.
Using basic forensic security software Avast was able to access images, contact details, passwords and bank account details on the second hand mobile phones. They even retrieved one completed loan application & four previous owners’ identities.
“Stalkers, enemies, and thieves can abuse personal data to stalk, blackmail and steal people’s identities. They can use this information to watch people’s every move, exploit their strange fetishes, open credit cards in their name, or even continue what they started by further selling their personal information online.”
Retrieving this information was possible thanks to certain versions of Android phones only wiping the index points to that data, not the areas that can be accessed directly. You’ll also find everyday hard drives act similarly when you perform a format … in other words it doesn’t completely wipe that information either.
While this study specifically pinpoints flaws in Android phones it is not unique that operating system. Be sure to do your homework before selling or giving away an old mobile phone to ensure your private information is kept private. For startling statistics read Avast’s blog article.
For nearly 15 years Shred-X Document Destruction has been the leader in secure destruction services. We assist organisations in complying with the Privacy Act 1988 and its Amendments providing tailored services to thousands of commercial sites and households across Australia.
In addition to destroying documents we also physically destroy mobile phones and offer a degaussing service to permanently remove data from hard drives.