a Sky News investigation has found some computer repair shops are illegally accessing personal data on customers’ hard drives – and even trying to hack their bank accounts.
In one case, passwords, log-in details and holiday photographs were all copied onto a portable memory stick by a technician. In other shops, customers were charged for non-existent work and simple faults were misdiagnosed.
The investigation was carried out using surveillance software loaded onto a brand-new laptop, it operated without the user being aware that every event that took place on the computer was being logged.
All activity on the screen was captured in still images, and the identity of whoever was using the computer was recorded using the laptop’s built-in camera. Sky engineers then created a simple, easily diagnosable fault, by loosening the connection of the internal memory chip. This prevented Windows being able to load. To get things working again, the chip would simply need to be pushed back into position.
The investigation targeted six different computer repair shops. All but one misdiagnosed or overcharged for the fault. The most serious offender was in Hammersmith, West London. Shortly after identifying the real fault, an engineer called our undercover reporter to say the computer needed a new motherboard (most shops can fix faulty laptop motherboards in all but a few cases, Aurora Computers included).
The surveillance software then recorded one technician browsing through the files on the hard-drive, including private documents and intimate holiday photos, including some of our researcher in her bikini. As he snooped through the files, he is seen smiling and showing the pictures to another colleague. Later on in the same shop, a second technician loads up the machine and also looks through the photos, which are inside a folder clearly marked ‘private’.
He then plugged his own portable memory stick into the laptop and copied files, including passwords and photos. Inside one of the documents copied to the memory stick was a text file containing passwords for Facebook, Hotmail, eBay and aa bank account. Once the technician had discovered this information, he opened a web browser on the laptop and attempted to log into the back account for around five minutes but was ultimately unsuccessful as the details were fake.
When confronted over the findings, staff said they did not want to respond to Sky News on camera. However in a telephone conversation, they denied all knowledge of the alleged abuses.
“It’s a big abuse of trust. If you were expert in computers you wouldn’t have to hand in your machine to be repaired. They know that. They know you won’t be able to tell what they’ve done afterwards, they know you’re putting your trust in them and unfortunately, as we’re seeing, there are too many people willing to abuse that trust. What you’ve shown is that there is a much wider problem in the industry than we knew about. It suggests we need to look at the area again and we do need to test it like you have done, but with a view of taking criminal enforcement action if these problems are found and evidenced.”
PC World in Brentford demanded an advance payment of £230 for a new motherboard. However, on collection Sky engineers discovered that only the loose memory chip had been replaced. PC World have since apologised and refunded the £230.