Cash Converters and CEX sell used phones with previous owners' data on them

Restoring factory settings is not enough

Two of the UK's largest pawnbrokers are selling used phones that still contain sensitive personal information of the previous owners, says a Channel 4 News report.

It was found that phones purchased from Cash Converters and CEX still contained the texts, photos, bank details and website histories of the previous owners, despite promises from the outlets that the owners' personal information would be "wiped".

However, it was found that both companies only used standard "restore factory setting" wiping techniques, meaning the data was still stored in the gadgets' memories - meaning freely available software from the internet could be used to extract it.

The "restore factory settings" button can be used by any phone owner to make the data invisible when the phone is turned on by a new owner, but it isn't a proper data wipe, despite what phone sellers can be told.

Technology expert SensePost was shown in the report capturing the personal details from gadgets purchased in Cash Converters and CEX stores.

Cash Converters told Channel 4 News that phones were "wiped" to a "standard level" using a "full factory restore" before phones were sold. CEX said it was "currently rolling out a new procedure" that "improves on the current erasing technique used in the second hand phone market".

Information Commissioner Christopher Graham told Channel 4 News he was now "contacting CEX and Cash Converters to demand an explanation of how they go about protecting customers' data".

Tags: security, Channel 4, Sense

Hackers try to blackmail plastic surgeon after stealing 500,000 patient records

READ THIS ARTICLE
DO NOT SHOW THIS BOX AGAIN [ x ]
Comments are now closed.
CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Business Risk Management Solutions

Create and deliver online assessments to identify business risks and track their mitigation and resolution.

Latest Jobs
Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.