隨著政務(wù)數(shù)字化與辦公信息化深入推進(jìn)，硬盤作為核心存儲(chǔ)介質(zhì)，更新迭代愈發(fā)頻繁。很多人以為刪除文件、格式化硬盤就能徹底清除痕跡，實(shí)則不然。普通刪除僅能清除數(shù)據(jù)索引，原始信息仍殘留在盤片或芯片中，專業(yè)恢復(fù)工具可輕松復(fù)原。閑置硬盤若處置不當(dāng)，就有可能成為數(shù)據(jù)泄露、失泄密的“隱形炸彈”。國家安全部14日發(fā)布安全提示文章。

Discarded hard drives could become "hidden bombs" for data leaks, China's Ministry of State Security (MSS) warned on Thursday, after disclosing a case involving the resale of "new" drives that still carried improperly erased internal data. The agency also stressed that idle hard drives containing classified information must never be discarded or resold randomly, according to a notice published on the ministry's official WeChat account.

With the rapid advancement of digital governance and office informatization, hard drives, as core data storage devices, are being replaced and upgraded more frequently. Many people mistakenly believe that deleting files or formatting a hard drive is enough to erase data, but that is not the case, the notice said.

However, ordinary deletion only removes data indexes, while the original information still remains on the disk or chip and can be easily recovered through professional recovery tools.

翻新硬盤“翻車”

不法商販為牟取高額利潤，常將回收的二手硬盤簡單處理后，冒充新品售賣，盤內(nèi)殘留的敏感數(shù)據(jù)、病毒木馬等極易造成安全隱患。

近期，某單位就向國家安全機(jī)關(guān)報(bào)告了一起翻新硬盤“翻車”的事件。該單位購買了一批“新”硬盤，但在對其進(jìn)行安全檢測過程中，發(fā)現(xiàn)該批硬盤仍存有大量殘留數(shù)據(jù)，其中還包括涉及黨政機(jī)關(guān)、高校、銀行等單位的內(nèi)部文件。

The MSS warned that some illegal vendors seeking high profits often perform only superficial processing on recycled second-hand hard drives before reselling them as new products. Residual sensitive information, malware, and viruses stored on such drives could pose major security risks, it noted.

In the case disclosed by the MSS, a certain organization reported to state security authorities that it had purchased a batch of "new" hard drives.

During subsequent security inspections, the organization discovered that the drives still contained large amounts of residual data, including internal documents from Party and government organs, universities, banks and other institutions.

經(jīng)倒查，某單位工作人員違反保密規(guī)定，將內(nèi)部使用的硬盤簡單清空數(shù)據(jù)后，當(dāng)作普通硬盤賣了廢品。最終，該單位相關(guān)責(zé)任人員均被依規(guī)依紀(jì)追責(zé)問責(zé)。此類案例并非個(gè)例，這些存儲(chǔ)在翻新硬盤里的敏感信息，一旦被不法分子或境外間諜情報(bào)機(jī)關(guān)獲取利用，將給個(gè)人、單位乃至國家安全造成危害。

Subsequent investigations found that an employee at another organization had violated confidentiality regulations by simply deleting data from internal hard drives before selling them as scrap. Relevant personnel were ultimately held accountable in accordance with regulations and disciplinary rules.

The MSS cautioned that such cases are not isolated incidents, warning if sensitive information stored on refurbished hard drives falls into the hands of criminals or overseas espionage agencies, it could endanger individuals, organizations and even national security.

如何妥善處置閑置硬盤？

• 購盤避坑：警惕“低價(jià)撿漏”陷阱。采購硬盤時(shí)，要選擇品牌官方渠道、授權(quán)經(jīng)銷商，仔細(xì)核驗(yàn)產(chǎn)品資質(zhì)、防偽標(biāo)識(shí)，不要因?yàn)閳D便宜而從非正規(guī)渠道購買。

• 用盤規(guī)范：嚴(yán)守安全操作要求。硬盤啟用前，可通過專業(yè)技術(shù)手段進(jìn)行安全檢測，通過格式化、病毒查殺等方式，排查殘留數(shù)據(jù)、惡意程序，確保合格后再投入使用。使用時(shí)，應(yīng)注意養(yǎng)成加密敏感文件、不隨意轉(zhuǎn)借硬盤、公私硬盤不混用等良好習(xí)慣。

• 涉密硬盤：嚴(yán)禁違規(guī)處置。須嚴(yán)格落實(shí)涉密載體銷毀規(guī)定，絕不能隨意丟棄、轉(zhuǎn)賣閑置硬盤。銷毀時(shí)，可送交有資質(zhì)的專業(yè)機(jī)構(gòu)徹底清除涉密信息，并采取鉆孔、粉碎或消磁等措施，確保信息無法還原。

• 普通硬盤：安全變現(xiàn)有方。非涉密、無敏感信息的閑置硬盤，經(jīng)規(guī)范處理后，可通過二手平臺(tái)正常交易。除用專業(yè)工具多次擦除數(shù)據(jù)外，還可以選擇平臺(tái)官方上門回收，由專業(yè)人員現(xiàn)場完成全盤覆寫，確認(rèn)數(shù)據(jù)無法恢復(fù)后再出售。

The notice also provided guidance on the safe procurement, use and disposal of hard drives. It advised consumers and organizations to purchase storage devices through official channels of reputable brands, carefully verify product certifications and anti-counterfeit labels, and conduct professional security inspections before putting hard drives into use to detect residual data or malicious programs.

For ordinary hard drives, the ministry said properly processed devices may be traded on second-hand platforms or recycled through official collection services. However, idle hard drives containing classified information must strictly follow regulations governing the destruction of confidential carriers. Such devices should be handed over to qualified professional institutions for complete data removal and physically destroyed through methods such as drilling, crushing or degaussing to ensure the information cannot be restored.

"The proper disposal of idle hard drives is a key line of defense in safeguarding data security," the notice stated. "Through the joint efforts of all sectors, every discarded hard drive can safely complete its mission."

來源：人民日報(bào)微信 國家安全部 環(huán)球時(shí)報(bào)

跟著China Daily

精讀英語新聞

“無痛”學(xué)英語，每天20分鐘就夠！