Government data found on memory sticks

[InfoSec News <alerts () infosecnews org>]

http://www.theaustralian.com.au/technology/government-data-found-on-memory-sticks/story-e6frgakx-1226773129880

AAP
December 02, 2013

USED memory sticks being sold on the internet have been found to contain 
sensitive Australian government data, according to a new study.

The research paper, to be presented at a cyber security conference in 
Perth, reveals how researchers discovered the government information 
amongst a "treasure trove" of confidential material on the discarded 
memory sticks.

And the results have prompted authors Patryk Szewczyk and Krishnun 
Sansurooah, of the Security Research Institute at Perth's Edith Cowan 
University, to urge sellers to beware they are not handing over their 
secrets by taking money for old memory sticks.

"The results show that sellers are sending memory cards with no evidence 
of erasure, poor attempts to erase data - or simply asking the buyer to 
erase the data prior to use," the study concluded.

"The data recovered is not only of a personal nature, but also appears to 
originate from Australian government departments and business."

[...]



--
Dean Bushmiller teaches a great 5-Day CISM in Albany NY Dec. 2  6.
Call 327-937-9786 for details.