Unsecured Device Disposal Catalyzes Data Breaches. Explained.

Common Methods of Storage Device Disposal

1. Shredding and Crushing

Shredding and crushing are suitable device disposal options for organizations that want to destroy confidential information. In both these methods, the storage device is physically destroyed, making it unusable. In shredding, you chop up the device into tiny pieces using a machine. In crushing, you destroy the device by applying immense pressure.

While they’re better than disposing of devices in an unsecured way, they’re somewhat tricky to execute. The process of physical destruction of storage devices is rife with disadvantages

If you employ a 3rd party vendor to carry out a physical mode of data destruction like shredding, you undertake massive risks. That’s because you’ll never be sure whether your devices were actually destroyed, or simply formatted and repurposed. This leads to massive data privacy breach risks.

Even when you destroy a storage device yourself, there are disadvantages.

1. The shredding equipment is bulky and costly

Both the shredder and crusher will take up huge spaces and are costly. That means you need dedicated operating space for both. The initial installation cost is high, particularly for small businesses.

2. You’ll need multiple trained operators 

Shredders are operated by trained technicians. Maintenance and repair are troublesome for businesses.

3. These machines are noisy

The machines make a lot of noise while physically destroying the storage devices.

4. You still need to figure out waste disposal

The chipped metal and plastic parts of the storage device will have to be disposed of correctly. Dropping them in landfills and oceans will damage the environment a lot and is illegal under several environmental protection laws.

While both these methods are reliable, they’re not practical for businesses, unless their disposal requirements are significant.

2. Degaussing

To understand degaussing, we need to understand how data is stored in a magnetic storage device such as a hard drive.

• The data in a hard disk is stored on a platter. 
• The platter spins under a read/write head. 
• The surface of the platter becomes magnetized when small pulses of electricity are passed through a coil in the head. 
• Data is recorded using binary code, a series of 1s and 0s (magnetic pulse and reverse pulse, consecutively).
   

A degausser removes the information present in hard drives by disrupting the magnetic fields that store the data in the platter. As a result, the data stored in the drive is scrambled rendering it unreadable. The previously existing data pattern is changed randomly so none of the new information is the same. Hence, the data is no longer recoverable.

This process renders the hard drive unusable. Hard Disk degaussing doesn’t just delete all the data, it also makes the hard disk unbootable. That means the operating system won’t be able to detect it.

Below are the risks and disadvantages associated with degaussing:

1. Costly: The price of a degausser makes it impractical for most SMBs. 
2. Special storage requirements: Degausser needs to be installed in a cold and dry environment. As it has magnetic components, it needs to be in a place that is free from magnetic interference.
3. Demands special operations training/personnel: You will need an expert engineer to operate the degausser. Or, you have to spend hours learning how to operate the degausser.
4. Not effective on solid state drives (SSDs): SSDs store data in flash memory chips, instead of magnetic disks. So, a degausser doesn’t work on an SSD.
5. Generates e-waste: A degaussed drive is e-waste, nothing else. You can’t use the drive again. For SMBs that wish to reduce their e-waste, degaussing isn’t the right solution. 

3. Melting

Corrosive acids, such as nitric acid and hydrochloric acid, are used to melt storage drives. The internal metallic components within the device casing get corroded and subsequently dissolved. This makes the data irrecoverable.

Melting sounds simple but is challenging. 

1. Dangerous environment: Concentrated acids can dissolve almost anything. Any form of exposure will cause permanent damage to the human body. Melting of storage devices is carried out in dedicated areas, which isn’t practical for most businesses. 
2. Expensive handling equipment: To make sure that the process is carried out smoothly and safely, a lot of safety equipment is needed. 
3. Costly disposal of acids: The acids have to be neutralized before they are disposed of by adding alkaline solutions to them. This adds to the cost even more.

Although effective, the risks with melting storage devices make it an unworthy option for businesses.

4. Dismantling

There’s always the option to open up a storage device and remove the part that holds the data. In the case of a hard drive, dismantling will involve:

• Unscrewing every screw in the plastic/metal casing
• Removing the platter (this is where all your data resides)
• Reusing the other components of the hard drive (read/write heads, PCB, spindle, etc)
   

Merely dismantling the hard drive doesn’t destroy the data. You’ll need to physically destroy the platter. This lets you reuse the other components of the drive. However, most businesses have no use for the components of a hard drive. The only purpose of dismantling, from a secure data destruction point of view, is to isolate the storage media (the platter in case of a hard drive) and destroy it.

You could dismantle an SSD and destroy its data chips. However, that’s tedious and hardly any different than simply destroying the entire SSD. That’s because, inside the SSD casing, you’ll only find a PCB where all the chips and controllers are embedded.

To dismantle an SSD:

• Unscrew all screws on the SSD casing. 
• Pry open the casing. 
• Take out the PCB and destroy it. 
   

 Any of the chips on the SSD PCB, if left undestroyed, can be reused to extract the data. So, this method isn’t fool proof. 

5. Data Erasure

Data erasure is the process of deleting data from your storage device permanently. This process makes the data irrecoverable. Data erasure is a reliable data disposal technique because of the following inherent benefits.

• Environment friendly: Disk erasure doesn’t generate any toxic e-waste, unlike shredding, chopping, and melting. 
• Affordable: When you erase your device data, you can reuse the device. Also, the software itself costs much lesser than what you’d spend on any other method.

How do I Find the Right Data Erasure Software?

Be aware of a couple of things while looking for data erasure software.

1. Most software is not compliant with regulations: Make sure that the data erasure software you are using is compliant with guidelines from organizations like NIST, HIPAA, etc.
2. Free versus paid data erasure software: Free data erasure software is almost guaranteed to be non-compliant. A proper data erasure software is a complex digital product, and it’s almost impossible for any software vendor to offer sophisticated software for free. Such downloadable files could easily be malware and ransomware. An affordable certified data erasure software is much better than a free one.

BitRaser Date Erasure Software for Hard Drives, SSDs, Mobile Devices, and Servers

Stellar Data Recovery’s BitRaser library of data erasure software brings you all these benefits, at a cost that works for most SMBs. BitRaser offers concrete advantages over any subscription-based data erasure software.

1. It complies with all relevant regulations, including NIST, HIPAA, and OnTrack.
2. Automation of data erasure processes is possible. The detailed reports are uploaded securely to the cloud.
3. BitRaser is fast, and you can erase up to 100 hard drives simultaneously.
4. You don't have to renew your license every month. BitRaser offers a license with lifetime validity.
    

So, don’t dispose of your devices unsecured. Erase your data so it doesn’t end up in the wrong hands. The cost of a lawsuit linked to a data breach due to data disposal negligence can be crippling. Instead, adopt a robust data destruction strategy. 

Get BitRaser Data Erasure software now.