Copier data risk raises alarms

Security risks in the humble photocopier are now the subject of high level government action in the US, as the fallout of a report from CBS News report last month continues to send shockwaves through the information sector.

In a widely distributed video report , CBS News uncovered a host of sensitive medical and law enforcement data available on hard disks within used photocopiers.

Most high end photocopiers sold since 2002 have the hard disks which can retain data that would prove embarrassing to some or provide a treasure trove for identity thieves.

The CBS News report points out that companies or government agencies often lease these machines but do not wipe clean the hard drives when the lease ends, allowing the next user to access, with limited technology, the copied images. The report investigated 6,000 used machines up for resale and found on them hundreds of individuals’ medical records, bank statements, income tax statements, and police details on a major drug investigation.

A forensic examination of a hard disk inside a typical photo copier shows a scanned JPG Image of a receipt, with many personal financial details.

The problem is widespread according to Matthew Westwood-Hill of Sydney's Forensic Digital Services.

“Corporations, government departments, law enforcement and even the individual need to realise just how much data is being produced on a minute to minute basis and the potential damage that can result from this information being used by the wrong people," said Westwood-Hill .

"It’s also important to look to devices such as digital copiers for sources of information in discovery processes and examinations. It’s also important to be mindful as to where data is created and being stored. ”

US Congressman Edward Markey has written to the Federal Trade Commission to investigate possible criminal misuse of copier hard drives.

“I am very concerned that these copy machines can be a treasure trove for identity thieves, allowing criminals to easily access highly sensitive personal information,’’ said Markey, a Democrat who is a senior member of the House Energy and Commerce Committee.