Bought a disk from CEX containing sensitive company information
I bought a disk from CEX that arrived yesterday.
I noticed it was not properly wiped but had a Windows Partition on it.
I used simple recovery to find out what was on it. Nothing complicated.
I found a huge amount of business data including sensitive data. I only looked at it to find out who it had belonged to.
It is a major FTSE250 company.
It had a uptime of 4 years 7 months and had been running for 4 years 6 months so it looks like it has been in a server.
I'm thinking their IT disposed of it incorrectly or the company they employed made the breach.
Could it even be stolen? If so the company should have secured the contents in some way.
Could it be hacked. They did have a breach at the start of the year
The disk is now shut down.
Do I :-
Forget it and just wipe it and not have any hassle
Contact the company itself.
Contact the police.
4, Contact the company's lawyers.
- Contact the lawyers who represent those who were breached.
5, Contact the ICO.
Contact the press.
Something else.
I don't want to risk being accused of stealing the disk or the data or of blackmail.
I don't want to be without the disk. I need it for backup. The police taking it for evidence without replacement or worse as stolen goods.
In an ideal world they would thank me for helping. Sadly we don't live in one.
I worked in IT Cybersecurity now retired early and a bit skint. I really don't feel generous towards big business.
Anonymous Account