BSIDES BELGRADE 2026
AGENDA 2026

About the Workshop/Talk

What kinds of things do you expect to find at a flea market? Ugly garden gnomes, antique dishes, and... terabytes of confidential patient health data? The latter is exactly what one random guy unknowingly bought last year when he noticed a stack of used hard drives being sold by another random guy. These hard drives – filled with personal data, test results, prescriptions and diagnoses, health statistics, and even scan images – had been passed down from a small, since closed IT service provider that was responsible for managing primary healthcare organizations’ IT equipment and processes. When a service provider has left the dance floor, its assets and data must be disposed of cyber-securely. When the owner of said service provider has also left the dance floor, it sadly doesn’t leave much recourse if that doesn’t happen. This interesting case walks through the technical challenges of analyzing highly sensitive personal and medical data, the nuances of data ownership, how privacy legislation can keep up with the current digital landscape, the critical importance of supply chain security, and balancing limited, noncongruent jurisdiction with personal responsibility.