What Should You Do With a Lost USB Stick?

Why You Should Never Plug in a USB Stick You Found

Finding a USB stick on the ground might feel like stumbling upon a mystery waiting to be solved, but before you plug it into your computer out of curiosity, stop. That small device could be hiding a big risk.

The Hidden Dangers of Unknown USB Drives

While it might be harmless, a found USB stick could also be a trap. Cybercriminals will load USB drives with malicious software and leave them in public places, like car parks or office reception areas, hoping someone will plug them in. Once connected, the malware silently installs itself, giving attackers access to your files, passwords, or even your entire network.

This tactic isn’t hypothetical:  One of the most infamous examples is the Stuxnet worm, which made headlines in 2010 after it was used to sabotage an Iranian nuclear facility. The worm is believed to have spread through infected USB drives.

What Should You Do If You Find a USB Stick?

If you come across a USB stick and don’t know who it belongs to, do not plug it into your computer. Instead, consider these safer options:

• Turn it in to a Lost and Found (e.g., at a school, office, or public venue)
• Hand it to the IT department if found on company premises
• Take it to a local police station if found in a public area

These authorities can attempt to return it to its rightful owner or safely inspect it without risking your personal data or devices.

This Isn’t a New Trick

Before USBs, CDs were used in similar ways. Some would automatically run programs when inserted, which could be exploited to install harmful software. A notable case occurred in 2005 when Sony BMG released music CDs with hidden copy protection software. This software secretly installed itself on users’ computers, sparking a major privacy and security scandal.

Stay Safe, Stay Savvy

The bottom line: only use USB drives from trusted sources. Curiosity might tempt you to ‘just have a quick peek’, but the risks far outweigh the potential reward. If you’re ever unsure about a device or need help staying secure, don’t hesitate to reach out to your IT support or a cybersecurity professional.