Scaleway: Incident SSD was stolen during a secure transport between datacenters

Re:Scaleway: Incident SSD was stolen during a secure transpo... by sofixa on Monday July 26, 2021 @07:33AM (#27958170)

> This just seems like they sold an old drive that should’ve been encrypted (it wasn’t) and wiped (it wasn’t

I find that unlikely ( unless as you said it was a rogue employee) - they're certified HDS ( hosting healthcare data) so i find it improbable they aren't supposed to have a special disk decommissioning process to follow, including secure wiping.

[ Parent | on HN ]

Re:Scaleway: Incident SSD was stolen during a secure transpo... by orwin on Monday July 26, 2021 @08:15AM (#27958473)

Yeah, our procedure for decommissioned SSD and HDD (imposed to us by HDS requirement) where 3-pass shred on the disk (logical wiping), and either pierce the HDD or microwave the SSD, with photographic proof send to our client if asked.

The 3-pass shred was done on the virtual disk each time a client left, and was done on the physical during maintenance.

[edit] And concerning encryption, it was at a premium, and i think only one of our client asked for it (this had a few issue). "hot" logs where not encrypted, but during the logrotation we tried to implement this (this was not technically audited btw, i think it was OK for Deloitte not to see our code)

[ Parent | on HN ]