52 - Data Destruction - CompTIA A+ 220-1202 - 2.9

Importance of Data Security

  • Data stored on devices is valuable; securing access is critical when decommissioning storage drives.

  • Physical destruction is an effective method for ensuring data cannot be recovered.

Methods of Physical Destruction

  • Drilling:

    • Easy method: Drill holes through the hard drive platters, effectively making data recovery impossible.

  • Shredding:

    • Industrial shredders can grind drives into smaller metal pieces, ensuring complete data destruction.

  • Degaussing:

    • Utilizes a powerful magnet to remove the magnetic field from spinning hard drives, making them unusable and irretrievable.

    • Limitation: Degaussing does not affect SSDs or flash memory drives.

  • Incineration:

    • Completely destroys the drive by burning it, ensuring data is irrevocably lost.

Data Deletion without Physical Destruction

  • For drives that are still usable but need data securely erased:

    • File-level Overwriting:

    • Tools like Microsoft's Sysinternals tool sdelete can securely delete files, preventing recovery.

    • Full Drive Utilities:

    • Derek's Boot and Nuke (DBAN) is a tool that wipes the entire drive clean, allowing for reuse.

    • Limitations for SSDs:

    • SSDs might hold data outside the file system, making some deletion utilities ineffective.

  • Formatting:

    • Low-Level Format:

    • Factory pre-formatting; generally not accessible to end users.

    • Standard (Regular) Format:

    • The default method in Windows that clears the index but leaves data intact; data can be recovered with right software.

    • Quick Format:

    • Builds the file system index but does not erase the data, leaving it recoverable.

    • Comprehensive Standard Format:

    • Overwrites every sector on the drive, ensuring no recovery of previous data; takes longer due to sector-by-sector operation.

Practical Considerations in Data Destruction

  • Physical destruction ensures data safety but may waste otherwise functional drives.

  • Industries such as financial services and health care often require robust data security measures.

  • Legal obligations may necessitate drive destruction to protect sensitive information.

    • Organizations must ensure that data is irretrievable and safe from unauthorized access.

  • Third-Party Services:

    • Large organizations with multiple drives may need to employ third parties for destruction.

    • Important to ensure that third party follows best practices for data destruction, providing:

    • Certificate of Destruction: Documentation verifying that a drive has been destroyed, evidencing that data is no longer accessible.

Data Breach Statistics

  • A significant study by Blanco and OnTrack in 2019 investigated used drives sold on eBay:

    • Analyzed 159 storage drives:

    • 42% contained sensitive data.

    • 66 drives had various types of data present;

    • 25 drives had personally identifiable information (PII).

    • Types of recoverable data included:

    • Information from travel and freight companies.

    • Academic papers from students.

    • Multimedia files (video, audio, personal media).

Conclusion

  • It is imperative to explore all options for securely decommissioning storage drives to safeguard sensitive information.

  • Awareness of potential risks when parting with storage devices is crucial, as improperly handled drives may lead to data breaches or unauthorized access.