Archive for the ‘I.D. Theft’ Category

Hard Drive Shred Size – Does it Matter?

Wednesday, October 12th, 2011

Finally, an article that puts the argument of Hard Drive Shred Size to bed!

Just a week ago, I about put myself into a coma by trying to explain the impracticality of trying to recover data from a hard drive that had been physically destroyed.

In short… IT’S IMPOSSIBLE

Ok… it is possible… but in the “I’m going to win the Powerball Lottery” kind of way.

It all comes down to how the data on a hard drive is encoded. Each manufacturer encodes their hard drives differently.  Then, to allow for the most data to be stored on these hard drives, the manufacturers are increasing the “areal density” (how tightly the data is encoded) on the drives.

This equates to extremely complex coding unique to each manufacturer.

But isn’t there something that can read the data off a random discarded piece of a hard drive?

In theory… Yes.

There is a process called magnetic force microscopy (MFM) photography that can see the data in its encoded format.

So then all we have to do is decode it – Right?

Well, not so fast.

First, there is the problem of size. Each one of these pictures would have to be saved somewhere for later decoding. For a 20 gigabite hard drive, all these MFM “pictures” would take up approximately 16 terabytes.

Then, here’s the fun part, each picture would then have to “be analyzed by an expert to interpret each bit” of information. Just the idea of this puts the notion of hard drive data recovery in the realms of impossible.

But were not done.

Now we have to know how the hard drive was encoded so we can know how to decode it.

To decode the data it would be necessary to know the manufacturer of the hard drive and the model of the hard drive, in fact. Most likely, one would even need to know the version of the firmware that was used to write the data. Even this information is not enough to decode the data, as one would need access to the manufacturer’s proprietary information concerning how that particular firmware/model drive actually wrote the data to the disk surface.

Still not satisfied that the data on your hard drive is not secure after running it through a hard drive shredder?

So even if we had all the information needed to decode the data, any hard drive that has been physically altered (shredded) will have significant damage to portions of the disks platters that will make the data impossible to retrieve no matter what.

The only response at this point is that data recovery from a physically destroyed hard drive, especially one that is in pieces, is impossible.

So I guess I need to restate my earlier comment…

You probably MORE LIKELY to win the lottery than having the data from a shredded hard drive restored.

To read the full story as published in Storage & Destruction Business magazine, here’s the link:

“Does Size Really Matter?”

As always, if you have any questions about hard drive shredding or have other document destruction concerns, please feel free to give us a call:

(619) 295-5474

Also, I’d love to hear your feedback about this topic in the comments section below.

Until next time… Keep Totally Secure.

Your friend,

Mike
Head Shredding Guy

P.S. I always knew that data recovery from a shredded hard drive was virtually impossible. But that paragraph in quotes above really eliminates the “virtually” part – Don’t ya think?

Swiper No Swiping

Tuesday, October 11th, 2011

“Swiper no Swiping, Swiper no Swiping, Swiper no Swiping…”

Anyone who’s raised a child in the last 10 years is most likely familiar with Dora the Explorer and Swiper.

Perhaps the New York City police are familiar (I doubt it) but this week the New York police have indited 111 people and arrested 85 in a two year operation called “Operation Swiper.”

The Queens District Attorney Richard A. Brown said this is “by far the largest and certainly amongst the most sophisticated identity-theft credit card fraud cases that any of us have ever seen.”

It certainly was a big one…

Apparently “skimmers” were hired “to steal credit card data from customers at restaurants and other businesses” where the info was than transferred onto other credit cards that were supplied overseas from Russia, Libya, Lebanon, and China.

The main items of interest were Apple products due to their easy resale overseas.

In total, $13 million in goods were purchased using this stolen credit card data.

Unfortunately there seems no simple precaution consumers can take to prevent their credit card from being skimmed at a restaurant. I for one, turn over my credit, on a plate (might as well be a silver platter), to my waiter or waitress. It’s anyone’s guess as to whether this person is an accomplice in some identity theft ring.

I suppose one option is to pay with cash at restaurants. However, this is probably not practical for most of us.

The only other thing to do is to keep a close eye on your bank and credit card accounts.

Reviewing your monthly bank and credit card statements in a timely manner is always a good idea.

If you find that your credit card has been compromised. Immediately let your bank or credit card company know. They will cancel your card and send out a new one.

In my experience, I’ve found that they are also really good at getting the money back into your account if there is any dispute.

To read the full story online, here’s the link:

http://latimesblogs.latimes.com/nationnow/2011/10/identity-theft-ring-busted.html

In the end, keep vigilant and keep an eye out for Swipers!

Until next time… Keep Totally Secure,

Mike
Head Shredding Guy

Doctor Fined $40,000 for Record Dumping

Friday, September 16th, 2011


Don’t think people are paying attention at the recycling center?

It appears a Charlotte North Carolina doctor recently had to pay out $40,000 for dumping patient files at the local recycling center.

This makes it pretty clear that recycling is not the same as shredding.

1,000 records in 25 boxes containing the personal information of 1,600 patients were dumped by the doctor’s sons in mid-June of 2010.

This comes to a whopping $1,600 per box of records!

Kind-of puts the cost of shredding in perspective doesn’t it? Especially when you could drop off these boxes at a secure shredding facility, such as Total Secure Shredding (for instance), and only pay $4.45 per box. I’d say the total cost of $111.25 for the secure shredding of these 25 boxes pales in comparison to this $40,000 fine.

I’ve personally seen records just dumped off at the recycling center here in good old San Diego. I have to say, not only is this irresponsible with regard to patient information, it also just doesn’t make any sense when you now consider the hefty fines that are being handed out by Attorney Generals.

My rule is simple when it comes to deciding whether to shred or not: When in doubt, shred!

After all, why take a risk with your own identity theft or the identity theft of a patient, client, or employee?

As always, if you have any questions about whether you should shred, please feel free to give me a call.

And until next time… Keep Totally Secure.

Your friend,

Mike
Head Shredding Guy
(619) 295-5474

P.S. Here’s the full article if you’d like to check it out: Doctor pays $40,000 fine for dumping 1,600 patients’ medical records

Who’s Going to Audit the HIPAA Auditor

Thursday, August 18th, 2011

Is anyone overly surprised when big multinational auditing firms and big bureaucratic government agencies get together the public they are charged with protecting end up worse off?

The Federal Department Health and Human Services (HHS) and the Office for Civil Rights (OCR) is apparently responsible for implementing and policing a couple of Congressional monstrosities know has HIPAA (Health Insurance Portability & Accountability Act) and HITECH (The Health Information Technology for Economic & Clinical Health Act).

Just that last sentence is enough to let you know there is “no good” afoot!

But in any event, these new laws have been put in place to hold health care providers and those who handle personal health information accountable to protecting client data. We all agree that protecting this data is important. However, only time will tell if  this new bureaucracy will succeed in protecting patients – I for one have my doubts.

With that in mind, the auditing firm KPMG has won the “OCR’s $9.2 million contract for HITECH-required HIPAA audits in June 2011…”

KPMG is assisting the government to implement the statutory requirement to audit covered entity and business associate compliance with the HIPAA privacy and security standards as amended by HITECH.

KPMG will end up auditing 150 entities varying in size by December 31, 2012. HITECH requires “periodic audits” of covered entities and business associates to ensure HIPAA compliance.

Unfortunately, it has come out that KPMG has is itself under investigation for a potential breach that may have affected “3,630 patients at Saint Barnabas Medical Center in Livingston NJ, and 956 patients at Newark Beth Israel Medical Center in Neward, NJ…”

Here’s the whole article if you’re interested: http://www.healthleadersmedia.com/page-1/PHY-269480/HIPAA-Auditor-Involved-in-Own-Data-Breach

Not to worry… I’m sure it will all work out for the best. After all, the government is in charge of this!

Until Next Time… Keep Totally Secure,

Mike Krauss
Head Shredding Guy