As E-waste Piles Grow, So Does the Risk of Identity Theft Do you have a scary closet at home or work that contains a bunch of stuff that you don’t know what to do with? Whether there are a few old cell phones, an old computer or an outdated PDA, we find ourselves with a growing pile of electronics in need of disposal. Now, think about all of the electronics that you have at work. Everyone seems to have a work computer these days. I’ve seen these “scary closets” all over Vermont. They range in size from a coat closet to a whole basement to pallets of material in a warehouse. The Environmental Protection Agency estimates that 75% of electronic waste, ready for end of life recycling, either goes out with the trash or sits in storage. In 2009, there were 438 million electronic devices sold. That year, 4.74 billion pounds of electronics was ready for end of life management. So, what do you do with dead computers and their confidential information? This is the question that we all face, today. Whether you’re deciding what to do with your old home computer, or you need to recycle 100 computers for your business, what should you do with them? First of all, don’t throw them in the trash. That’s illegal and puts hazardous waste into our environment. Secondly, consider if your electronics contain confidential information that needs to be securely disposed, if so, remove it. Ten years ago, would you have thrown your old tax return into the trash? Probably not, you would have recycled it, at a minimum because this option is better for the environment. Today, would you throw your old tax return into the recycling? Probably not, you would shred it because this option is more secure. We need to think of our electronics the same way. We’re at a turning point in the way E-waste is disposed. Responsibly recycling your material is an important step, but shouldn’t be your first step. For your protection from identity theft and your business’ compliance, you must first consider the secure disposal of any hard drives, and other electronic storage devices such as backup tapes, DVDs, thumb drives, etc. The recycling risks of these devices are real and extensive as computers can be handled by countless people and companies before they eventually get recycled. To give you a visual on the data that can be stored on a 500 gigabyte computer hard drive, imagine a storage room filled with approximately 10,000 records storage boxes full of paper. Could you imagine if a Vermont business threw all of these boxes into the trash or recycling stream? In fact, an MIT study showed that 146 of 158 used hard drives purchased on the internet for $1,000 were not properly sanitized and contained a bevy of confidential information such as credit card numbers, medical records and corporate financial records. We don’t know if any of those hard drives originated in Vermont. Today, the vast majority of identity theft occurs with electronic data versus paper. Confidential information is confidential information, regardless of it being on paper or on a hard drive, and it must be properly destroyed. In order to protect confidential personal and business information and prevent identity theft, the U.S. and Vermont governments have created and enacted laws to help prevent this from happening. These laws have one thing in common; they all require businesses to safeguard consumer confidential information, regardless of its form. In Vermont, the Vermont E-cycles Program was established in 2011. This program allows free drop-off of certain electronic waste devices for residents, 501c3 charities, school districts and small businesses of ten or fewer employees at convenient locations around the state (www.vtecycles.org). There are also several companies in Vermont that collect, process and/or store electronics for eventual end-of-life recycling out of state. SecurShred, Vermont’s first certified hard drive and other electronic storage media destruction company, provides services for businesses and individuals throughout the state. “The security of any personal data or information (such as social security number, tax or banking, business records, or personal identification, etc.) is the sole responsibility of the owner of the electronic device being dropped at a Collection Location for recycling. Don’t simply delete files or reformat your hard drive. This does not destroy all the data.” – Vermont E-cycles The good news is that electronics recycling is becoming easier and safer for the environment every day. However, the risk of identity theft is now more digital than ever. So before you recycle or donate your old electronics, think about your data on that device because that’s exactly what the identity thieves are thinking about. ____________________________________________________________________________________________________ David Van Mullen Certified Secure Destruction Specialist SecurShred | Ship-n-Destroy Email: david@securshred.com
Posted by admin @ 7:04 pm
Categories: Electronics Recycling
Tags: computer recycling, electronic waste, recycle electronics, risk of identity theft
+ POST A COMMENT // COMMENTS (0)
Hard Drive Destruction and Recycling Risks Today’s computers are faster, more efficient, come with bigger capacities and are being produced at virtually the same price now as they were 18 months ago. This advancement in new technology has created a huge mess in terms of what to do with our old technology. In order to keep up, companies need to continually upgrade their software and electronics. This creates a tremendous amount of e-cycling waste and increases the risk of confidential material being leaked or the potential of identity theft. In order to protect businesses and consumers the government has created and enacted laws to help prevent this from happening such as FACTA, Gramm-Leach-Bliley, HIPPA, and the Red Flag Rules. In 2009, 5 million tons of electronics were in storage and 2.37 million tons of electronics were ready for end-of-life management. Out of that, only 25% was collected for recycling. (www.epa.gov, October 2011) Many people are misinformed or not properly educated on what to do with their old technology once it has become obsolete and is ready for the scrap pile. Did you know it is illegal to landfill computers and electronics? Computers, monitors, IPod’s, phones, etc all have hazardous materials in them such as lead, mercury, and chromium. Besides being harmful to our environment there are now strict fines associated with landfilling computer equipment. “If your discarded computers or monitors are found to be contaminating a landfill, your firm can be traced through the serial numbers recorded when they were originally purchased and you could be held liable for the clean up and/or given a substantial fine” (Legal Management, June 2007). Recently individual States have begun to work with local recycling and waste removal services to offer computer and monitor recycling for free. Though these programs are intended to help with the back log of computers in storage and to keep them out of landfills, there is still the concern of the confidential information that is housed in them. Majority of these facilities do not offer hard drive sanitation services or even check to see if the hard drives are still installed in the computers. There are also programs that are designed to help place computers into the hands of people that do not have them. This recycling program places refurbished computers into needy schools in all over the world. If you have a computer that is properly sanitized by a professional this is a great way to e-cycle your old computer. If you are a business or an individual that stores sensitive information on your computer, it is best to remove your hard drive and replace it before donating it to be on the safe side. Companies and individuals trying to save money and/or recoup some of their losses on this old technology make a foolish mistake by thinking they can simply erase the data on their hard drives by conventional means. Reformatting is simply not a secure way to eliminate the information written on a hard drive. As long as a hard drive can spin, information can be extracted from them. Some sectors of a hard drive may not be successfully over written due to undetectable defects in them. The undetectable defects on the drive that were not wiped clean may actually enable retrieval in its next life. Another mistake that is made is to resell the equipment on the mass market where it can be picked up by anyone with out proper sanitation being performed on the internal hard drives. “Remembrances of Data Past” (IEEE Security and Privacy, January/February 2003) concludes that “the secondary hard disk market is almost certainly awash in information that is both sensitive and confidential. The most secure way to ensure your information is safe is to remove your hard drive and to physically have it destroyed by a NAID Certified Company. The National Association for Information Destruction (NAID) is a watchdog organization of the secure information destruction industry. For many years, NAID has certified qualified companies that provide secure paper and hard drive destruction services. When choosing a computer disposal company there are 6 factors you should look at: 1. Is the vendor’s facility secure? 2. Does the vendor screen its employee’s? 3. Review the vendor’s written procedures and other paperwork. 4. Look beyond the vendor’s marketing claims. 5. Examine the vendor’s physical destruction capability. 6. Appraise the vendor’s security focus. 7. Know what your company is doing with its old computers. Despite the temptation to deal with computer disposal as just another facility management issue, the process you choose and the vendor you select speak to the integrity of your firm. The cost in time and dollars for appropriately protecting a firm’s vital information is well worth fulfilling this ethical responsibility so critical to a lawyer’s fiduciary charge. Destruction of your old hard drives does not have to be a scary process. SecurShred, a NAID Certified paper and electronic media destruction company has recently launched Ship-n-Destroy.com. Ship-n-Destroy is a secure online shipment destruction company that specializes in the secure destruction of electronic storage media such as hard drives & backup tapes, as well as, paper. It’s easy to Ship-n-Destroy! Simply fill out an online quote/order form, select one of two options, Premium or Regular Service, and ship us your material using a preprinted UPS shipping label. With Premium Service, you have the piece of mind knowing your confidential material will be transported to our facility using a lockable tote that comes with two numbered locks. Using Regular service, you are able to use your own packaging to ship your materials to our plant for destruction and recycling. At any time, you are able to track your package from our website under your account login. Ship-n-Destroy’s secure plant is operated by SecurShred, an information destruction & electronics recycling company, that has been certified for hard drive & paper media destruction for plant-based and mobile operation by the National Association for Information Destruction (NAID). SecurShred has been in business since 2000 and is an A-rated member of the Better Business Bureau. For more information regarding Ship-n-Destroy and SecurShred, visit our websites www.shipndestroy.com or www.securshred.com.
Posted by admin @ 7:45 pm
Categories: Electronics Recycling
Tags: computer recycling, electronics recycling services, hard drive destruction, hard drive recycling, US Computer Recycling Company
+ POST A COMMENT // COMMENTS (1)