BreachExchange mailing list archives

Re: hard drive destruction


From: blitz <blitz () strikenet kicks-ass net>
Date: Wed, 16 Aug 2006 11:57:51 -0400

Generally, Im for recycling drives as much as possible, for not too many have the resources to access an electron microscope needed to see anything left over after a DOD approved wipe and rewrite scheme. If it were National security, incineration is the only way, as you'd be dealing with entities with the time and money. PII theft is usually a crime of opportunity.
A DOD 5200.28 wipe should suffice.


At 09:32 8/16/2006, you wrote:
Just wondering what the group feels is an adequate level of destruction
for a hard drive that contains personal financial information . . .

A. Using software to wipe the drive to DOD 5200.28 spec.

B.  Cutting the platters in half (great big saw that essentially chops
the drive into two pieces).

C.  Drilling out the center of the platter with a 2" drill bit.

D.  Hard drive degausser.

E.  Other - please specify.

--
George Toft, CISSP, MSIS
My IT Department
www.myITaz.com
480-544-1067

Confidential data protection experts for the financial industry.
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 142 million compromised records in 303 incidents over 6 years.

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 142 million compromised records in 303 incidents over 6 years.



Current thread: