The Risks of Reselling Corporate Routers: A Security Alert.

Researchers at ESET found that most used corporate-grade routers sold online still contained sensitive data due to improper wiping during decommissioning. The routers retained customer information, data that allowed third-party connections to the network, and even “credentials for connecting to other networks as a trusted party.” The researchers warn that an adversary with access to this type of information could easily come up with an attack plan that would take them deep inside the network undetected. Companies should have procedures in place for the secure destruction and disposal of their digital equipment.