10/01/2026
This week, for Cyber Awareness Thursday, let’s discuss why your copier may be storing more information than you realize.
Yes, today's copiers print, scan, and copy documents, and they have internal hard drives or solid-state storage that temporarily or permanently store scanned documents, print jobs, email addresses, user credentials, and configuration settings. Depending on how they're configured, they can also connect to Microsoft 365, network file shares, cloud storage platforms, and your organization's email system. Most businesses don’t think about it, but this stored information and access can lead to a data breach when leased copiers are replaced or returned.
Many organizations assume the leasing company automatically erases everything before the equipment is refurbished or resold, and while reputable vendors typically follow secure procedures, that assumption shouldn't replace verification. In fact, that same concern applies when ensuring that default administrator passwords are changed, firmware is updated, or unnecessary services are disabled. Attackers are good at getting into business networks, so, like any other connected devices, copiers require routine maintenance, security updates, and proper configuration to reduce unnecessary risk.
Before replacing a copier, it’s best to ask the vendor how they remove data stored on the device and request written confirmation that the storage has been securely sanitized or physically destroyed if appropriate. If the copier stores sensitive information, security features should be enabled, such as encrypted storage, secure print release, administrator authentication, and automatic overwrite.
Attackers don't care whether the information comes from a laptop, a server, or a copier; they look for the easiest way to access valuable business data. Every connected device has the potential to become a security liability. If you have questions about securing the devices throughout your business, give us a call, we can help.
301-456-6931
https://clarkcomputerservices.com/cybersecurity-services/
