When Auctioning Unclaimed Devices Backfires: What Every Business, Organization, & Law Enforcement Agency Needs to Know

It was supposed to be routine.

A transit agency, following a citywide directive, sent unclaimed lost & found items — including several cell phones — to a government-approved auction site. Weeks later, chaos unfolded. One of those phones hadn’t been properly wiped. The winning bidder accessed sensitive personal data, tracked down the original owner, and demanded payment in exchange for returning the device.

The agency was blindsided — and suddenly exposed to legal and reputational risk.

This scenario isn’t an isolated incident.

A growing body of research, including a study presented at the IEEE Symposium on Security and Privacy, reveals that a staggering number of phones sold at government auctions still contain sensitive data. Researchers purchased 85 used mobile devices from U.S. government resellers and found personal photos, tax documents, medical records, even passwords — all left behind, accessible to the highest bidder.

A 2023 investigative report by cybersecurity journalist Brian Krebs revealed that many mobile phones sold through government-affiliated auction platforms — including those from police departments — still contain sensitive personal data. Krebs and fellow researchers were able to recover court records, domestic violence reports, intimate photos, and full contact lists from devices that had not been properly sanitized. In one alarming case, a purchased phone contained a woman’s restraining order documents and explicit photos, creating a serious safety risk and re-victimizing someone who had already endured abuse.

These findings raise urgent ethical and legal questions about how businesses and agencies handle unclaimed evidence and highlight the critical need for secure, verified data erasure protocols before any device leaves official custody.

Why This Keeps Happening

Despite best intentions, there are several systemic issues:

• Lack of training on forensic-level data erasure.
• Overreliance on factory resets, which don’t fully remove data.
• Pressure to clear property rooms or lost & found inventory quickly and cheaply.
  
  

These incidents highlight a hard truth:

⚠️  If devices aren’t securely and professionally wiped, your agency/company could be liable for breaches of privacy, data theft, extortion, or worse.

A Responsible Approach to Device Disposal

These incidents raise a critical question for law enforcement, municipal agencies, and businesses: What’s the best way to handle unclaimed or evidentiary phones without putting the public—or the agency/company—at risk?

One effective approach used by agencies and companies across the country is to partner with organizations that specialize in guaranteed secure, forensic-level data wiping and ethical repurposing or disposal of electronic devices. For example, when devices are donated to nonprofit 501c3 programs like the 911 Cell Phone Bank, they are:

• Professionally wiped using certified data erasure software (or responsibly recycled at an R2 facility if data removal is not possible),
• Logged for documentation and audit purposes, and
• Redirected to serve a humanitarian purpose, such as supporting victims of domestic abuse or human trafficking.

This method not only mitigates liability and prevents privacy violations but also allows agencies to contribute positively to the community — all without incurring extra cost or resource strain.

It’s a practical solution to a complex issue — one that aligns with public safety, data privacy, and public trust.

If your company or agency is re-evaluating how it handles unclaimed or evidentiary devices, we’re happy to share insights or connect you with others who’ve found success with alternative approaches. You can reach our team at info@911cellphonebank.org or 866-290-7864.

About 911 Cell Phone Bank

The 911 Cell Phone Bank is a national 501(c)(3) nonprofit that works with law enforcement and victim service agencies to support individuals in crisis. They accept a wide range of unclaimed electronic devices—cell phones, tablets, laptops, and more—and ensure each donation is handled securely and responsibly. The program is 100% free, including all shipping costs.

Clear your shelves. Protect your brand. Do something that matters.Donate your unclaimed items today at www.911cellphonebank.org.

More like this:

The Hidden Dangers of Selling Unclaimed Lost and Found Items
The 5 Most Common Lost & Found Mistakes (and How to Avoid Them)
6 Signs Your Organization Is Overlooking a Major ESG Opportunity (And How to Respond)