When a company decides to “retire” a hard drive (a common term used by companies), sell an old computer, recycle an older model of PC, or if after years of service the unit has finally failed completely, then the data on it needs to be destroyed for good and verifiably. We destroy the data on hard drives and solid state disks (SSDs) using the exact same forensic grade equipment as we use to recover it, but running in reverse. Every single sector on each disk is overwritten. The resulting media is then verified. A certificate of destruction is issued. The drive can now be reused; the data will never again be available. Based in Leeds, we provide hard drive destruction Yorkshire-wide and secure data destruction Yorkshire businesses can rely on. We are able to provide physical shredding, degaussing and a certificate of destruction for your peace of mind.
All drives are wiped, then checked by reading them back to verify that no information is recoverable from them prior to the certificate being issued.
A true wipe does not include a quick format, nor can it involve simply dragging files into the “bin”: in both instances the data remains on the magnetic disks, awaiting an organisation such as our own to retrieve it. The forensic erase process involves overwriting each area of the disk which can contain data, followed by a verification run to check if there was anything which could have been retrieved. The method employed is identical to the recovery process used by our organisation; however, this time it is reversed and based upon the NIST recognised guidelines for sanitising digital media (NIST 800-88). When completed, the drive will report clean, hold no data, and it cannot be recovered by us or anyone else using similar equipment.
A physical overwrite of data on a disk that spins will delete (replace and remove) all magnetic information from the disk. Flash memory (SSDs) does not have this same property. A simple overwrite of data in flash will likely write the new data to unused space on the SSD, then map that new space to what was originally used by the old data. Thus an overwrite may not physically destroy all of the original data. Therefore, for flash memory devices, a full erase (which involves both a removal of the mapping and removal of the actual bits stored in the cells), either through a secure erase command from the controller or encryption-based wiping, must be performed. The task of knowing which type of wipe is required to completely and securely erase data is therefore the entire project. Performing an incorrect wipe results in ‘erased’ data showing back up when a reused computer has been sold.
Each request has similar underlying reasons: the need to retire an older drive, server or laptop (GDPR); you want to be able to show the data was properly erased from the equipment prior to disposal; equipment is going to be sold, donated, or otherwise recycled; your business is disposing of project materials after completion; or equipment brought in for data recovery purposes now needs to go back out permanently dead. We provide a certificate of erasure (serial number, method used, and date) for all drives, for your reference and those of your auditors. Verified erase allows the hardware to be reused, which is greener and results in cost savings compared with shredding the device, and provides equal protection against recovery of the information on the device; when a customer requires actual physical destruction of the media, we can direct them on how best to achieve this. It is the mirror image of our forensic recovery work, at opposite ends of the same bench.
Yes, on a hard drive: a verified overwrite will replace that information. There is no information behind it to recover from. On an SSD we are using the controller’s own secure-erase command instead of doing a surface pass. Either way, once we’ve completed our verification process (reading the data back) and confirmed zero recoverable data, then the certificate is issued. We do not certify what we have not verified.
Yes. Each drive has a certificate of erasure that lists the drive’s serial number; the method we use for wiping; and the date (the same paperwork that would be expected by a data protection audit once hardware is decommissioned).
Sometimes. If the drive can be powered on long enough to be wiped and verified, then this is what we do. However, if the drive is damaged beyond being able to perform a safe overwrite, then physical destruction of the media may be required. We would advise you as to which case applies, along with the reasons why, rather than provide a certificate we could not support.