main
Report a problem

Lockheed Martin forgets to clean hard drives, sold on eBay

Brad Sams   on 08 May 2009 - 12:41 · 62 comments & 8822 views

Advertisement (Why?)
When you're a government contractor you had better keep your ducks in line. It goes without saying that if you're storing sensitive data that you dispose of the hard drives properly at the end of their life (EOL).

BT's Security Research Center has found that Lockheed Martin is notoriously bad about not removing the data from hard drives that it disposes of at their EOL. The list of information pulled from hard drives that were originally owned by Lockheed Martin is disturbing, the information includes: "launch procedures were found on a hard disk for the THAAD (Terminal High Altitude Area Defense) ground to air missile defense system, used to shoot down Scud missiles in Iraq." and "other sensitive information including bank account details, medical records, confidential business plans, financial company data, personal id numbers, and job descriptions."

All of the hard drives were purchased on eBay or at computer auctions/fairs. It's a growing trend that computer technicians are unaware of how to properly dispose of a hard drive by either destroying it or removing the sensitive data in a manner that allows for no possible recovery of data. Another alarming thought is why was this data not encrypted?

Lockheed Martin was not the only corporation to be found at fault for this practice but by far had the most sensitive data.

Post a comment · Send to friend Comments · There are 62 additional comments
(4 replies) #1 +chorpeac on 08 May 2009 - 12:55
OH so format c:\ is not good?? DUH!! hahaha Shame on them
#1.1 TR2006LH on 08 May 2009 - 13:09
It is really good that the data is not gone forever after formatting.
Atleast we can get the data back when someone just formats the disk accidently. May be during OS partitioning, installation, etc.
#1.2 PatrynXX on 08 May 2009 - 19:12
chorpeac said,
OH so format c:\ is not good?? DUH!! hahaha Shame on them


way too old school. thats why we needed new people in there. Best thing for a company is hire some hackers. Not put them in jail. Then you get idiots giving out top secret stuff to ebay. ZERO the drive idiots!!
#1.3 +Techno_Funky on 09 May 2009 - 05:18
If they were EOL+ such sensitive data, why not destroy them then sell em off ebay.
#1.4 Tal Greywolf on 09 May 2009 - 19:29
Let me state that I work for a defense department contractor (not LockMart, incidentally). Per our company's security policy, we have A) disk encryption on every hard drive that is connected to the network, B) a strong password requirement for accounts, C) a tool that changes the Administrator password on a constant basis, and D) a DoD mandated wipe tool for hard drives for use when the drives are being disposed of. However, the tool only works if the drive can be booted to, which means if the hard drive has suffered a crash, that drive is fully unrecoverable and we have to provide it to the site security folks for physical disposition (read physical destruction). This is what is SUPPOSED to be done, but how often does even our own government sell drives that haven't been sanitized before disposition? Security is only as good as the human factor, something we all tend to keep forgetting.
(9 replies) #2 TR2006LH on 08 May 2009 - 13:08
We can recover data from Formatted disk easily. There are even many free tools to do that.
It's really funny that all this is found on eBay that too without wiping the data using strong methods.
#2.1 leesmithg on 08 May 2009 - 13:45
You can only recover data that has not been written over.
#2.2 vetneufuse on 08 May 2009 - 13:53
leesmithg said,
You can only recover data that has not been written over.

Not entirely true, you CAN recover data that was writen over, if you have a lot of money and the correct tools
#2.3 XerXis on 08 May 2009 - 14:08
neufuse said,
Not entirely true, you CAN recover data that was writen over, if you have a lot of money and the correct tools


and you need some luck and good algorithms to fill in the blanks It is a myth btw that you can recover data that has been overwritten twice
#2.4 boogerjones on 08 May 2009 - 14:30
neufuse said,
Not entirely true, you CAN recover data that was writen over, if you have a lot of money and the correct tools
That's a myth started a long time ago by Peter Guttmann. He now acknowledges that the actual recovery of any useful information from hard drives that have been overwritten with even a single pass of random data is essentially impossible, even by governments. The electron microscope methods mentioned were always just theoretical.
#2.5 +chconline on 08 May 2009 - 15:21
They could have just used DBAN, lol.
#2.6 PatrynXX on 08 May 2009 - 19:15
XerXis said,
and you need some luck and good algorithms to fill in the blanks It is a myth btw that you can recover data that has been overwritten twice


Only thing I'd like to recover is files off a Syquest Syjet 1.5 gb drive. 2 of them are too full for XP. and doesn't seem to run in 98 for the moment. anybody who can point me in the direction of a cheap place.. can probably keep the drive. But most recovery places are about $500 or so. oh how 1.5 gb used to mean something lol
#2.7 +d4v1d05 on 08 May 2009 - 21:15
neufuse said,
Not entirely true, you CAN recover data that was writen over, if you have a lot of money and the correct tools

http://16systems.com/zero.php < I'll just leave this here...
#2.8 +Chipshop on 09 May 2009 - 17:38
ha ha i was gonna argue that anything is possible but after reading that i decline to comment *shifty*
#2.9 LaP on 11 May 2009 - 13:49
Recovering overwritten data
See also: Data erasure

When data have been physically overwritten on a hard disk it is generally assumed that the previous data are no longer possible to recover. In 1996, Peter Gutmann, a respected computer scientist, presented a paper that suggested overwritten data could be recovered through the use of Scanning transmission electron microscopy.[4] In 2001, he presented another paper on a similar topic.[5] Substantial criticism has followed, primarily dealing with the lack of any concrete examples of significant amounts of overwritten data being recovered.[6][7] To guard against this type of data recovery, he and Colin Plumb designed the Gutmann method, which is used by several disk scrubbing software packages.

Although Gutmann's theory may be correct, there's no practical evidence that overwritten data can be recovered. Moreover, there are good reasons to think that it cannot.[8]

http://en.wikipedia.org/wiki/Data_recovery
(9 replies) #3 java2beans on 08 May 2009 - 13:29
The best way to get rid of the data on your hard drive when selling your computer is to get rid of the hard drive itself.
#3.1 leesmithg on 08 May 2009 - 13:40
java2beans said,
The best way to get rid of the data on your hard drive when selling your computer is to get rid of the hard drive itself.

I remove the platers and chop them into tiny pieces and then dispose of them in at least 10 different places including the sewer.

I do this also for expired plastic bank cards and other sensitive information that is 6+ years old.

How about they employ me, pay me hundreds of thousands of pounds to get rid of their data, I will burn it all in a furness if they prefer it that way.
#3.2 smithy_dll on 08 May 2009 - 13:41
That's why the NSA recommend you use bullets just to make sure iirc.
#3.3 Dannydeman on 08 May 2009 - 14:32
leesmithg said,
I remove the platers and chop them into tiny pieces and then dispose of them in at least 10 different places including the sewer.

I do this also for expired plastic bank cards and other sensitive information that is 6+ years old.

How about they employ me, pay me hundreds of thousands of pounds to get rid of their data, I will burn it all in a furness if they prefer it that way.


You are either a pedophile or paranoid
#3.4 leesmithg on 08 May 2009 - 15:31
Well I would refrain from making such comments.

The word is paedophile, to which I am not.

Paranoid I am not either, I have disposed of one Hard Drive only which contained information which was copyrighted to me.

The drive had died, so someone with skils maybe without losing data could had mounted them on a drive and recovered the data.

I had it backed up to another two drives and 40 DvD's.

So it was no big deal to get another hard drive and transfer the data to it.
#3.5 MountainSnake on 08 May 2009 - 15:55
Dannydeman said,
You are either a pedophile or paranoid



lol
#3.6 surrealvortex on 08 May 2009 - 16:20
leesmithg said,
The word is paedophile, to which I am not.


The word is pedophile..
http://www.merriam-webster.com/dictionary/pedophile
#3.7 +Callum M-R on 08 May 2009 - 16:36
surrealvortex said,


Erm. Not in English.
#3.8 bb10 on 08 May 2009 - 17:53
Callum M-R said,
surrealvortex said,


Erm. Not in English.

Yes, in english.
http://en.wiktionary.org/wiki/paedophile
#3.9 stezo2k on 09 May 2009 - 06:50
Dannydeman said,
leesmithg said,
I remove the platers and chop them into tiny pieces and then dispose of them in at least 10 different places including the sewer.

I do this also for expired plastic bank cards and other sensitive information that is 6+ years old.

How about they employ me, pay me hundreds of thousands of pounds to get rid of their data, I will burn it all in a furness if they prefer it that way.


You are either a pedophile or paranoid

or both :p
(1 reply) #4 WAR-DOG on 08 May 2009 - 13:48
#4.1 boogerjones on 08 May 2009 - 14:32
WAR-DOG said,

Secure Erase is a much better method if your motherboard allows it.
#5 Dwarden on 08 May 2009 - 13:56
any hardware which is used for data storage of secret informations should be cooked in EM grill to prevent any further usage ...
(1 reply) #6 GEIST on 08 May 2009 - 14:02
I don't know what's more disturbing: LM forgetting to wipe their harrdrives, or putting them on Ebay or similar places.
#6.1 Steffan on 08 May 2009 - 14:05
what's more disturbing is that hds with secret info even see the light outside of the building in one piece
(1 reply) #7 Windows7even on 08 May 2009 - 14:13
what...u mean computer technicians dont use hammers anymore? *gasp*
#7.1 Tal Greywolf on 09 May 2009 - 19:32
It's not our job to destroy the drives. If you work for any of the major defense department contractors, it's the responsibility of the site security folks to dispose/destroy the drives. *YOU* (as a technician) can be held liable for destruction of government property if you decide to do the job yourself, and don't delude yourself into thinking otherwise.
#8 Brandon on 08 May 2009 - 14:14
The company bake sale must have not generated enough money.............
#9 saasn on 08 May 2009 - 14:41
Meh, I would of just taken them down to a place where they shred metal, at least I know they'll be recycled and not in land fill.
(1 reply) #10 +chorpeac on 08 May 2009 - 14:50
I seriously doubt LM as a company said hey, let's take all these 3,000 hard drives and put them on Ebay. I think it is more like some lazy and idiot contractors/employees from LM taking the drives, which were supposed to be disposed of and selling them themselves. Either way, a company has to have good procedures in place for getting rid of hardware...and apparently these guys need to look at those procedures again.
#10.1 Tal Greywolf on 09 May 2009 - 19:35
Agreed. Where I work, we do have very definite procedures for disposing of excess computer hardware, and we follow them to the letter. That means clearing the BIOS, running the DoD certified drive wipe tools, and making sure nothing was left behind in the machine before they are picked up for disposal. Now that doesn't mean that the hardware won't end up on, say, Dell's used hardware pages, but it does mean that we've done everything that was expected of us prior to that point, and have paperwork signed off showing it.

Paranoia can be a good thing when you're dealing with the DoD.
#11 NoLiMiT06 on 08 May 2009 - 14:52
All I can say is... Dumbass
#12 Airlink on 08 May 2009 - 15:00
Or you could just smash it to bits with a hammer.
mashy:
mashy:
#13 Pccw9 on 08 May 2009 - 15:11
Blower for Lockheed
(1 reply) #14 Sazz181 on 08 May 2009 - 15:16
Is there a greener way of securely wiping the hard drive (or making it unrecoverable) than burning it? Also, are you able to recycle hard drives?

#14.1 Tal Greywolf on 09 May 2009 - 19:40
We have DoD certified programs that will do either a 3-pass or 7-pass wipe. In either case, you end up with a drive that has been written to and zeroed out so that the data cannot be recovered.

There are places that are starting to spring up that deal with electronics recycling. California instituted a program statewide for electronics recycling, with drop off points and everything. We (meaning the site where I work at) has a contractor that comes and takes care of our excess equipment on an as-needed basis.
#15 Critical Error on 08 May 2009 - 15:17
The best way how to completely delete HDD is zeroing
(1 reply) #16 blade1269 on 08 May 2009 - 15:44
If that info is bought on the black market, imagine what could be done with it? Remeber just weeks ago we had terabites of data stolen by hackers. how come our government networks are not encypeted, and other sevices using a vpn at least?

Note: I am a bad speller.
#16.1 Apple-a-Day on 08 May 2009 - 16:21
What do you mean the black-market.. apparently its open to the highest bidder on Ebay LOL
(1 reply) #17 TonyLock on 08 May 2009 - 15:57
eBay?
- Is LM low on cash?

Computer Technicians?
How on earth are they computer technicians if they don't know how to destroy such data?
#17.1 Tal Greywolf on 09 May 2009 - 19:45
eBay. No, I doubt LockMart is low on cash, but depending on the company's policies on disposal, I would not be surprised if one of their sites decided to get rid of excess equipment via a sale. Other companies have done it before, some have company stores where an employee can purchase a used computer or laptop.

Computer Technicians. I've said it up thread. It is not your responsibility to know how to destroy data. In a large site, you might have contractors who maintain the hardware, and all they might do is pull a drive out that's failing, slap in a new one, run a script to reload your machine and walk away. That is the entire extent of their job, too. Machine failed? Drop a new one off at the desk that's been configured and have a nice day. (Where I work is a small site, so the techs there have to know how to troubleshoot hardware and software.)
#18 exotoxic on 08 May 2009 - 16:11
I dont think they forgot to clean the drives, they just didnt bother. If i waas the government i would terminate the contract and get the money back.
(3 replies) #19 +dead.cell on 08 May 2009 - 16:14
I like to take the silver discs out of the hard drive no longer good or in use. Make great coasters.
#19.1 zeke009 on 08 May 2009 - 16:43
dead.cell said,
I like to take the silver discs out of the hard drive no longer good or in use. Make great coasters.

They are fun to throw around too.
#19.2 C++ on 08 May 2009 - 23:18
dead.cell said,
I like to take the silver discs out of the hard drive no longer good or in use. Make great coasters.

You'd think a person who takes apart hard disk drives would at least know it is called a platter.
#19.3 GreyWolfSC on 10 May 2009 - 15:59
I make mobiles out of 'em.
#20 zeke009 on 08 May 2009 - 16:44
Ages ago I made a boot disc that had GDisk and DoD Wipe on it... maybe I should find that and send it to LM.
(2 replies) #21 DaveHope on 08 May 2009 - 18:07
heh, appalling.

At work we have a cupboard with 200+ dead / old drives. Every few years we get a company in to turn them into powder which they return to us in clear plastic bags
#21.1 xendrome on 08 May 2009 - 19:43
Then they sell them on ebay, and you snort the powder that you think was your old hard-drives?
#21.2 DaveHope on 08 May 2009 - 23:21
xendrome said,
Then they sell them on ebay, and you snort the powder that you think was your old hard-drives?


Not quite. The company turns up with a snazzy van kitted out with some industrial shredders. The drives are destroyed on-site, we could sit and watch them turn them to dust if we really wanted.
#22 barteh on 08 May 2009 - 18:08
I just dont get why these sorts of hard drives are not destroyed?
The price of security against the price of a second hand hard drive (which is likely to be a small capacity in this day and age anyway), what the hell are they playing at?
#23 perochan on 08 May 2009 - 20:07
either trash the harddrive or dont sell it AT ALL!
(1 reply) #24 jme621 on 08 May 2009 - 21:15
anyone else find it funny that the ad on this page is for hd recovery?

#24.1 toadeater on 11 May 2009 - 04:48
That's some hardcore targeted advertising!
#25 MytMowse on 09 May 2009 - 21:20
learn to free space wipe.
#26 Solid Knight on 11 May 2009 - 04:02
Knowing some of the idiots they hire as contractors in Iraq this doesn't surprise me. And yeah, I'm speaking from experience here.
#27 busdude on 11 May 2009 - 07:00
I bought a cisco switch off ebay, still loaded with it's NOAA configuration on there. Probally some subcontractor of a subcontractor of a subcontractor doing the work and dident wipe it before sending it to the auction house which dident have a rollover cable so they couldent test it. Also bought a PC this last week at the state surplus store that had a windows XP load from clark college on there. It wouldent boot all the way and i dident feel like tinkering with it too much but if i wanted to get into it it wouldent have been hard at all.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)