Why Reselling Beats Pull/Shred: The Financial and Risk Case
Pull the drive, shred it, done. It’s a policy a lot of companies adopted years ago because it felt like the safest option. It’s not wrong, exactly, but it’s usually more expensive and less secure than it looks.
The financial side nobody talks about
Every laptop, server, or piece of network equipment that still functions has resale value, sometimes significant value, especially within the first few years of its life. Automatically shredding functional equipment means writing that value off entirely instead of recovering even a fraction of it. This isn’t a niche market either: the refurbished computer and laptop segment alone was valued at roughly 5.4 billion dollars in 2024 and is projected to nearly double by 2034, inside a broader secondhand electronics market already estimated above 220 billion dollars globally. For organizations refreshing hardware on a regular cycle, shredding functioning equipment adds up to real, recoverable money left on the table year after year.
The risk side nobody expects
Here’s the part that surprises people: shredding isn’t automatically the most secure option. A rushed or poorly documented shred process, especially one handled in-house or by an uncertified vendor, can actually create more risk than a properly managed resale process. A widely cited study by the University of Hertfordshire, commissioned by Comparitech, purchased 200 used hard drives from online marketplaces and found that roughly six in ten still contained recoverable data from their previous owners, despite most sellers believing the drives had been properly wiped. The drives had usually been reformatted, not sanitized, which looks the same to an average user but isn’t. The lesson isn’t shred versus resell, it’s verified versus unverified. An informal process fails at both.
What a better process actually looks like
A responsible ITAD partner sanitizes data to a verified standard, NIST 800-88 for example, before any decision gets made about the hardware’s future. Once data is confirmed gone, and only then, equipment gets evaluated for resale. Anything that doesn’t meet resale standards, or was never meant to, still gets processed with full documentation. You get the security of no readable data leaving the building and the option to recover value from what’s still usable.
Why the stakes keep climbing
IBM’s 2024 Cost of a Data Breach Report put the global average cost of a breach at 4.88 million dollars, up 10 percent from the year before, the largest single-year jump since the pandemic. A breach traced back to improperly retired equipment is one of the more preventable causes on that list, and it’s getting more expensive to get wrong every year.
Rethinking the default
Pull-and-shred as a blanket policy usually comes from an understandable place: wanting the simplest possible answer to a hard problem. But simple and secure aren’t the same thing, and neither are simple and profitable. A verified data sanitization process paired with resale where appropriate tends to check both boxes at once.