How We Track Stolen Devices
From large enterprise to small business and everyone in between, lost and stolen laptops are a real problem. Take, for example, the British Broadcasting Corporation (BBC). The BBC recently reported that over 170 laptops, tablets, and mobile phones had been lost or stolen over the last two years. The devices have a value of course, but even more concerning than the replacement cost is the potential for data that resides on that device to fall into the wrong hands. Compliance fines for the failure to protect personal information from regulations such as GDPR, HIPAA and others are no laughing matter. In January, MD Anderson was ordered to pay $4.3 million in civil money penalties for HIPAA violations when they failed to encrypt protected health information (PHI) which led to the exposure of more than 35,000 individuals when a laptop was stolen and two thumb drives were lost in 2012 and 2013. At Absolute, we have the Investigations and Recovery Team to track and recover stolen devices on behalf of our customers. Since the team’s formation in 1993, we have helped customers around the globe recover more than 50,000 laptops over the years. In FY2018 alone, the team investigated more than 15,000 laptop incidents and successfully recovered 67% of them. To track and recover stolen laptops, the team takes the following steps.
Step 1: Assess the Situation
When a customer lets us know about a stolen laptop, our recovery agents immediately assesses the situation using the investigative skills of our team members and our patented Persistence technology, which provides visibility into the state of the device and offers controls to remediate issues quickly, no matter whether it’s on or off the network.
Step 2: Contact Law Enforcement
Based on the initial incident assessment, we work with our contacts at over 6,500 global law enforcement agencies. All of our team members are certified in information security and most of them are former state and federal law enforcement agents who have significant investigation experience. This step is extremely valuable to organizations because most don’t have the bandwidth to work with law enforcement agencies. Additionally, not all organizations — especially within an enterprise environment — authorize employees to be able to file a police report on the company’s behalf.
Step 3: Recommendations on Handling Data
If we determine that a stolen device has sensitive information on it, we can also remotely freeze or delete the data and provide a Risk Analysis report within the first 72 hours to satisfy GDPR requirements. Our third-party assessment details risk action recommendations including whether or not the device was encrypted. This knowledge lets the company know if reporting the incident to affected individuals and regulatory bodies is required. The Investigations and Recovery Team works with numerous industries including education, healthcare, financial, oil and gas, and others. Why? Because theft, unfortunately, occurs everywhere and data protection is important to everyone. One tip to leave you with: if one of your devices is stolen and you’re an Absolute customer, your first step should be to call us rather than institute a device freeze – even if you have that capability. Let our experts look into the incident and determine the best course of action. If needed, we will coordinate with law enforcement on your behalf and let you know if the device’s data was encrypted or not so you know if reporting will be necessary given GDPR requirements. Finally, it’s important to remember that device tracking isn’t device recovery. Don’t attempt to recover a stolen device on your own. If a crime has been committed, let the professionals handle it.
Closing Thoughts
When a laptop is stolen, the stakes go beyond the replacement cost. Sensitive data can easily fall into the wrong hands, leading to compliance violations and security risks. It's crucial to have a well-defined recovery process in place to address these situations quickly and effectively.
To understand how organizations can take the right steps to recover stolen devices, explore strategies for laptop recovery that can help minimize the impact of data theft. Proper data handling is key to avoiding legal and regulatory repercussions. Find out how to ensure your data is protected if your laptop is stolen and how to meet compliance requirements during these incidents.
Find Out More
For detailed guidance on recovering stolen laptops and safeguarding sensitive data, read our comprehensive recovery guide.
Stay Connected
Want to stay connected? You’ve got options. Explore our resource library, follow us on LinkedIn, or book a demo to see our solutions in action.
About Absolute
Simply put: we’re undeletable. Embedded in more than 600 million devices, our cyber resilience platform delivers endpoint-to-network access security coverage, ensures automated security compliance, and enables operational continuity. Nearly 21,000 global customers rely on Absolute to protect critical assets and keep security applications running smoothly. Building lasting cyber resilience is our promise — are you ready?
