[Dataloss] Idaho utility hard drives and data turn up on eBay

lyger lyger at attrition.org
Thu May 4 16:59:17 EDT 2006


(makes me wonder what type of customer and employee data may have been 
found.. - lyger)

http://computerworld.com/securitytopics/security/story/0,10801,111148,00.html

News Story by Sharon Fisher

MAY 04, 2006 (COMPUTERWORLD) - Anybody with five bucks and a little 
patience may be able to score sensitive corporate or customer data on 
eBay.

If your organization has engaged in the common practice of disk drive 
recycling -- selling unneeded disk drives directly or through a service -- 
company data might wind up for sale on eBay Inc.'s auction site, even if 
the drives have been wiped first.

Idaho Power Co. discovered that possibility last week as it scrambled to 
track down company disk drives that had been sold on eBay without having 
been scrubbed first. The Boise, Idaho-based utility serves approximately 
460,000 customers in the southern part of Idaho and in eastern Oregon.

Data on the drives, which had been used in servers, contained proprietary 
company information such as memos, correspondence with some customers and 
confidential employee information, the company said.

[...]



More information about the Dataloss mailing list