Office printers may leave network doors open to hackers

Office printers in government and private buildings may be leaking sensitive data through outdated configurations. A confidential audit of several agencies revealed that these devices often retain default passwords and store network settings that hackers can access. The devices do more than copy paper. They hold hard drives and firmware that remain vulnerable if administrators do not update them.

The audit found that modern multifunction devices store documents, scan histories, and address books. These files sit on internal hard drives in many models. The report indicates that these components often hold network settings and other sensitive information. The risk exists because many units operate with factory-default credentials that never change. This setup allows unauthorized users to connect to the local network and extract data.

InvestigateTV obtained the audit results after receiving them confidentially. The review covered machines across the country. The findings apply to offices where these devices handle confidential records. Doctors, schools, and police departments are among the groups potentially affected by the exposure. The devices hum in corners of offices, processing data while sitting on the same networks as other sensitive computers.

The issue stems from how the hardware is designed and maintained. Manufacturers set default passwords to help with initial setup. IT staff often fail to change these codes after installation. The devices also retain scan histories and contact lists on their internal storage. This data persists even after the paper prints. The combination of stored data and weak security creates a direct path for cyber intruders.

The audit highlights a gap in standard office security practices. Most organizations focus on computers and servers. They often overlook the printers that sit next to them. The confidential report shows that these overlooked devices can compromise the entire network. The findings suggest that a simple password change and a firmware update could close the gap. The audit provides a specific list of vulnerabilities that agencies must address to protect their files.