Photocopiers: The newest ID theft threat
Newer models have hard drives that record what has been duplicated
Computerworld - Photocopiers are the newest threat to identity theft, a copier maker said today, because newer models equipped with hard drives record what's been duplicated. At tax time, when Americans photocopy tax returns, confidential information may be easily available to criminals.
"Consumers and business owners will photocopy highly confidential tax forms containing Social Security numbers, employer identification numbers and other sensitive information in places outside the home, leaving them vulnerable to digital theft," Ed McLaughlin, president of Sharp Document Solutions Company of America, said in a statement.
At issue are the hard drives embedded in most copiers and intelligent printers manufactured in the past five years. Data is stored on the drive before a document is copied or printed; unless security provisions are in place, the data is stored unencrypted and remains there until the drive is full and new data overwrites old.
Sharp, a major copier maker, commissioned a survey that found 55% of Americans plan to photocopy or print out copies of their tax returns and supporting documents this year. And almost half of that number will do so outside the home, using copiers and intelligent printers at their offices or public machines at libraries and copy centers.
"Everyone forgets that there's data in there," said Avivah Litan, an analyst at Gartner Inc. "Copiers and other intelligent devices like multifunction printers are very exposed in the enterprise. They're open to attack via modems, and people forget about changing the default passwords."
Sharp's survey also indicated that 54% of those polled had no clue that digital photocopiers store an image of what's duplicated and that a majority believed running off returns on copiers or printers is a safe practice. When told of the security threat posed by unsecured hardware, however, two-thirds of the people surveyed said they were less likely to copy their financial information on a public digital photocopier.
"I've not heard of any cases of ID theft [from photocopiers]," said Litan. "But there is certainly ID theft in public places like Internet cafes and from kiosks, so I don't see why it couldn't happen at someplace like a Kinko's."
Sharp was one of the first photocopier makers to offer a security kit that encrypts data on the hard drive and "shreds" each copied document by overwriting the image after it's printed. Rival Xerox Corp. introduced similar features on its machines last year.
"We've told enterprises that they should change the password from the default on copiers and [multifunction printers]," said Litan. "They should disable all services that they don't need and make sure that the data modem is separate from the fax modem."
Read more about Security in Computerworld's Security Topic Center.
- Mobile First: Securing Information Sprawl Learn how the partnership between Box and MobileIron can help you execute a "mobile first" strategy that manages and secures both mobile apps...
- Cybersecurity Imperatives: Reinvent your Network Security The Rise of CyberSecurity
- Surescripts Case Study- Securing Keys and Certificates Surescripts implemented Venafi's Trust Protection Platform™ to secure digital keys and certificates, ensure the privacy and confidentiality of electronic clinical information for its...
- Ponemon 2014 SSH Security Vulnerability Report According to research by the Ponemon Institute, 3 out of 4 enterprises have no security controls in place for SSH which leaves organizations...
- Responding to New SSL Cybersecurity Threat The featured Gartner research examines current strategies to address new SSL cybersecurity threats and vulnerabilities.
- Deep Dive into Advanced Networking and Security with Hybrid Cloud Security and networking are among the top concerns when moving workloads to the cloud. VMware vCloud® Hybrid Service™ enables you to extend your... All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!