Wednesday, May 13, 2009

HIPAA Security - Alert #3

Disposing of Computers:

A British research group bought about 300 used computers from on-line sources and second hand stores.

The purpose was to search for confidential data on hard drives.

Among other data, the researchers found top secret classified U.S. military defense plans. Oops!

Used practice computers should not be sold or discarded unless the hard drive is removed or a real expert "wipes" the hard drive. Using the computers standard "delete" function does not wipe the information from the drive.

Old hard drives that cannot be wiped are best removed from the machine and "fixed" with a large hammer, and then disposed of in a pile of trash not likely to attract the curious.

This advice goes as well for portable devices of all kinds.

No comments:

Post a Comment