Corporate Survey on PC and Storage Device Disposal and Information Security 2026

HAKU Co., Ltd. (Headquarters: Bunkyo-ku, Tokyo; Representative Director: Hisao Tezuka), a company specializing in the disposal and data erasure of computers, servers, and HDDs, has conducted the 'Corporate Survey on PC and Storage Device Disposal and Information Security 2026' targeting 600 administrative and IT system managers from companies with 10 or more employees.

Survey Background

From 2025 to 2026, multiple information leaks have occurred due to improper disposal and management of computers, servers, and storage devices.

[Case 1] Up to 510,000 patient records leaked via online auction In June 2025, it was discovered that personal information of up to 510,000 patients and staff (names, addresses, medical records, nursing logs, etc.) had been leaked from the National Hospital Organization's Hokkaido Medical Center and Hokkaido Cancer Center. Although approximately 750 HDDs were disposed of through a third-party vendor in March 2024 during an electronic medical record system upgrade, some of these supposedly erased HDDs were later found circulating on online auction sites.

[Case 2] 83 laptops stolen, risking exposure of 115,000 individuals' personal data In October 2025, an employee of a contracted helpdesk provider in Urasoe City, Okinawa Prefecture, was arrested for stealing 83 business-use laptops from the city hall. Three of these laptops contained citizens' personal information (resident registration details, names, addresses, birthdates, family registries, bank account numbers, etc.), potentially affecting approximately 115,600 individuals. Although security policies existed, the lack of detailed operational procedures was cited as a key cause.

[Case 3] Risk of leakage of 10.9 million customer records In June 2026, Kyushu Electric Power Transmission & Distribution Co., Ltd. announced the loss of a backup external storage device, potentially exposing up to 10.9 million customer records (customer names, supply addresses, electricity usage, phone numbers, etc.).

All these incidents were caused not by cyberattacks, but by physical mismanagement and improper disposal of PCs and storage devices. In light of these incidents, this survey was conducted to understand the current state of corporate practices.

Key Survey Findings

42.0% of companies still retain used PCs and storage devices within their premises.

47.1% of companies either perform only initialization, take no action, or are unsure about data erasure.

25.2% of companies lack proper disposal rules or designated personnel.

52.0% of companies reported 'no particular challenges' regarding disposal and data erasure, while the most common challenge among those who do face issues is 'not wanting to incur disposal costs' (26.7%).

Detailed Survey Results

Q1. Status of Retained Used PCs and Storage Devices

Combining responses of 'largely retained' (12.8%) and 'somewhat retained' (29.2%), 42.0% of companies retain used PCs, HDDs, USB drives, etc., without proper disposal.

Q2. Methods of Disposal

The most common response was 'outsourced to a specialized disposal company' (38.5%). Meanwhile, 21.8% reported that devices are 'still being stored,' indicating a significant number of companies have not progressed with disposal.

Q3. Data Erasure Methods

Only 20.8% reported 'outsourcing erasure to a professional and obtaining a certificate of erasure.' When combining 'only initialization or formatting' (11.5%), 'no action taken' (13.8%), and 'not sure' (21.8%), approximately half (47.1%) of companies are in a state where it cannot be confirmed whether data has been properly erased.

Q4. Internal Disposal Rules and Management Systems

Only 33.5% of companies reported having 'documented rules with designated personnel.' When combining 'personnel assigned but no documented rules' (11.0%) and 'no rules or personnel designated' (14.2%), 25.2% of companies have insufficient disposal management systems.

Q5. Challenges in Disposal and Data Erasure (Multiple Selection)

The most common response overall was 'no particular challenges' (52.0%). While 42% of companies retain devices internally (Q1), over half report no awareness of disposal issues. Among companies that do perceive challenges, 'not wanting to incur disposal costs' (26.7%) was the most common, indicating cost concerns are a primary factor delaying disposal.

Summary

This survey reveals multiple challenges surrounding the disposal of PCs and storage devices. Over 40% of companies have not disposed of used equipment, and nearly half lack proper or verifiable data erasure methods. Furthermore, even among companies retaining devices, over half claim 'no particular challenges,' highlighting insufficient risk awareness. Cost concerns are preventing timely disposal, as confirmed by this survey.

As recent incidents demonstrate, a single unused PC, HDD, or USB drive left in the office can become the starting point of a major data breach. HAKU Co., Ltd. provides disposal services for corporate computers, servers, and HDDs, including secure data erasure and issuance of data erasure certificates. Please feel free to consult us for any questions regarding disposal procedures.

Survey Overview

Survey Name: Corporate Survey on PC and Storage Device Disposal and Information Security 2026

Survey Period: June 12–14, 2026

Target: Administrative and IT system managers from companies with 10 or more employees

Valid Responses: 600

Method: Online survey

Company Overview

Company Name: HAKU Co., Ltd. URL: https://haku-t.com

Representative Director: Hisao Tezuka

Address: 3-16-6 Yushima, Bunkyo-ku, Tokyo 113-0034, Urban Building 1F

TEL: 03-5817-4256

Business: Computer recycling, data erasure, reuse and recycling services

Certifications: Privacy Mark holder, ADEC-certified data erasure service provider

Secondhand Goods Dealer License: Tokyo Metropolitan Public Safety Commission No. 307760707166

Tokyo Metropolitan Industrial Waste Collection and Transport License

Staff certified as PC Diagnostic Technicians

Contact for This Matter

HAKU Co., Ltd. Contact: Yudai Uchikawa TEL: 03-5817-4256 / MAIL: y-uchikawa@haku-t.com