Identity theft danger with old PCs

Jan 15 2009 By Maitland Hyslop, Onyx Group

WHICH? Computing magazine issued this advice after learning that identity thieves are trawling council tips and internet auction sites for discarded PCs in the hope of recovering personal and confidential information.

After buying eight second-hand hard drives from eBay, researchers downloaded free software from the internet, and were able to recover 22,000 supposedly ‘wiped’ files from the drives, including images and spreadsheets, from which fraudulent applications can be made.

This research clearly illustrates that it is not merely Government departments that are targets for fraudsters. Everyone with a personal computer, digital camera, pva or mobile phone is susceptible. In particular, PCs contain more valuable personal information than ever as people increasingly shop online, bank online, use social networking sites and take digital photos.

According to Which? the average UK citizen is worth an estimated £85,000 to an identity fraudster and the risk of falling victim is as high as ever.

A recent case saw Alexander Skipwith, from London, paying £100 to get his hard drive back after being held to ransom by a man, who sent personal photographs as proof that he could access ‘deleted’ documents. These files included bank statements and a mortgage application. Alexander had previously been told that his faulty hard drive would be wiped of personal information when it was replaced by a computer manufacturer. Skipwith contacted the police but there was a difficulty in establishing jurisdiction and what crime had actually been committed.

Tips on safeguarding your files:

1. Delete your data properly

Your data is your responsibility so if it is saved on your hard drive, you must put in place processes to ensure it is properly removed.

2. Think about how you store data

Avoid storing sensitive data such as bank details on your PC. If you really need to store this data, encrypt it.

3. Use data deletion software

Tests have shown that paid-for packages are effective at destroying data, so invest in one to ensure your files have been removed before getting rid of your PC.

4. Destroy your drive

If you want to ensure that no one will ever access data on your hard drive, destroy it. Hit it with a hammer!

5. Businesses

Encrypt all hard drives or, for added security, host your data offsite in a secure data centre.

6. Don’t worry! If you are careful, you significantly lower the chances of someone stealing your precious personal data.

Maitland Hyslop is chief operating officer of Onyx Group