An Oregon State Police detective confirmed to Jonathon Zdziarski that an OTB refurbished iPhone he purchased contained recoverable personal data.
Jonathon has posted about this on his blog:
A few days ago, I posted a discovery in that personal data remains intact (in deleted portions of the file system) following a full iPhone restore. As it turns out, Apple may not have been aware of this privacy leak either. A verified detective from the Oregon State Police notified me this afterrnoon that an out-of-the-box refurbished iPhone he purchased contained recoverable personal data including email, personal photos, and even financial information which he was able to recover using my forensic toolkit. The photos he sent me included the individual's name, which I've blurred out myself, but if you've ever had to return a defective iPhone, you might recognize this inbox. The more sensitive information hasn't been posted here for obvious reasons.
Read More
Below you can find screenshots of the recovered information:
Jonathon has posted about this on his blog:
A few days ago, I posted a discovery in that personal data remains intact (in deleted portions of the file system) following a full iPhone restore. As it turns out, Apple may not have been aware of this privacy leak either. A verified detective from the Oregon State Police notified me this afterrnoon that an out-of-the-box refurbished iPhone he purchased contained recoverable personal data including email, personal photos, and even financial information which he was able to recover using my forensic toolkit. The photos he sent me included the individual's name, which I've blurred out myself, but if you've ever had to return a defective iPhone, you might recognize this inbox. The more sensitive information hasn't been posted here for obvious reasons.
Read More
Below you can find screenshots of the recovered information: