Office Printers in Davidson County Face Hidden Cyber Risks

InvestigateTV+ reported on a security vulnerability affecting office printers nationwide, identifying a specific configuration error that leaves devices open to unauthorized access. The investigation centers on multifunction devices that perform tasks beyond simple printing, such as scanning and copying.

According to the report, many of these machines store sensitive data locally. This can include scanned documents, scan histories, address books, and network settings. Some models also contain hard drives and firmware that retain information even after the physical paper is processed.

The primary risk stems from outdated or default settings. The audit found that default passwords are often never changed by users or IT staff. When these weak credentials remain active, they provide a direct pathway for hackers to access the device's internal storage and network connections.

The potential impact extends beyond standard office files. The investigation noted that the vulnerability could put sensitive records at risk for several key sectors. These include medical practices, school districts, and police departments. In each of these fields, the data stored on a printer may contain confidential patient records, student information, or investigative files.

The findings come from a confidential audit of several agencies' machines. The audit was provided to the news team to illustrate the scope of the problem. It highlighted that the issue is not limited to one specific brand or model but is a widespread practice in device management.

The report describes the devices as humming in the corners of offices across America. While they are designed to be convenient tools for daily business, their connectivity features create a digital footprint. This footprint includes network settings that can link the printer to the broader organizational infrastructure.

The investigation suggests that changing these default settings is a necessary step to secure the network. Until those changes are made, the devices remain potential entry points for cyberattacks targeting the sensitive information they hold.