Did You Trade Your Data for a DVD Rental?

In June of this year, publisher Chicken Soup for the Soul Entertainment, best known for its book series of the same name, filed for Chapter 7 and Chapter 11 bankruptcy and had many of its assets liquidated. One of these assets was the movie rental service Redbox and its eponymous scarlet rental kiosks, rendering the service defunct.

However, many kiosks remain standing outside businesses even now, which makes us wonder… what about all the data they collected while they were in use?

Yes, the Self-Serve Movie Rental Kiosks Could Potentially Put Your Data at Risk

You’re likely familiar with Redbox, with at least knowledge of them if not first-hand experience. These kiosks were once commonly found at gas stations, grocery stores, pharmacies, and other public places, and allowed customers to rent DVDs and Blu-ray discs. All one had to do was provide a credit card to sign out a movie, and the service would charge them per day until it was deposited back into one of these kiosks.

While Redbox would attempt to follow other content services into streaming as the new delivery method became widespread, these developments ultimately left the business in the past.

However, many red kiosks remain “in the wild” even now, burdening some businesses that hosted the service with clunky machines that serve no purpose. Some hobbyists have taken on the kiosks, entertaining themselves by tinkering with them. One such hobbyist enabled the Doom video game to play on one of them.

This is all in good fun… but what if we swap out the hobbyist for a hacker?

These Kiosks Still Hold a Substantial Amount of Data

Foone Turing, a programmer, used a hard drive image (which is effectively a compressed copy of a hard drive) to look into a kiosk’s inner workings.

What she found was not good.

Turing pulled a ton of data—including a lot of personally identifiable information—from the image. This data included:

  • All email addresses and zip codes that had ever rented a disc
  • All discs each email address had rented and when they had done so
  • Partially hidden credit card numbers (Turing gave the example 1234 56## #### 7890)

So, if you think about your nearest Redbox—perhaps one you used yourself—and how easy it would be to obtain that kiosk from a business that just wants to get rid of it, it should make you worry a little.

What Can We Take Away from This?

First, we all need to be more aware of what data we share and with whom. The unfortunate truth is that we have no guarantee of how secure a company is keeping its data or where it is stored. Redbox had this data sitting in minimally protected hard drives, just hanging out in public places. There’s no guarantee that any other business is being more diligent. We must strictly evaluate what we share with businesses and whether doing so is necessary.

Second, there is a cybersecurity threshold that businesses need to meet to maintain the trust of their clientele and protect themselves and their operations from impending threats.

At White Mountain IT Services, we help New Hampshire businesses accomplish both, ensuring that they maintain proper data handling and are sufficiently secured against threats. Call (603) 889-0800 to learn more about how we can help you.

White Mountain IT

Related Posts

Three IT Obstacles that Crumble to Proactive Action

Technology is meant to be the wind in your business' sails, propelling you forward, simplifying tasks, and making operations smoother than a freshly paved highway, right? Sometimes, it is! Other times, it feels more like a mischievous gremlin has been let loose in the engine room, and certain seemingly small habits can escalate into full-blown operational nightmares. Here at White Mountain IT Services, we've se...

2025’s NFL Draft Showed Why Cybersecurity is Important Everywhere

There are a few occasions that we get a very apparent example of how important basic cybersecurity is, regardless of where you are, and this year’s National Football League draft is one such example. For those who don’t follow the NFL or the draft proceedings, multiple draftees received prank calls during the process, although one in particular is applicable to businesses of all kinds. Let’s exam...

How to Prioritize Security in File Sharing

Business file sharing has become a daily routine. It's a crucial part of collaboration, communication, and overall productivity. However, with the rise of cyberthreats, file security is more important than ever. It's not just about sharing files but doing it securely and efficiently. Today, we'll look at some best practices for business file sharing. Understanding the Importance of Secure Busin...

What is Zero-Trust, and How Can My Business Achieve It?

Let me ask you something: would you trust a bank that locked its doors for the night but left all its cash in a big pile in the middle of the floor? Probably not—after all, if someone managed to get through the doors, nothing would stop them from helping themselves to the funds inside. This is effectively how cybersecurity once worked, with the presumption that if someone had access to a network,...