What is drive shredding?
Drive shredding is one of the physical destruction methods for data-bearing media. An industrial shredder with hardened rotating cutters tears hard drives, solid-state drives (SSDs), tapes, phones and flash media into strips or small particles. Organizations usually hire a destruction vendor, either at the vendor's facility or with a mobile shredding truck at the customer's site, and receive a certificate of destruction afterward. Because the whole device is reduced to fragments, shredding gives consistent results that do not depend on one person aiming a drill correctly.
Hard drives vs. SSDs
- Hard disk drives (HDDs) store data on magnetic platters. Shredding breaks the platters into pieces. Larger fragments could in theory still hold readable areas, so policies often set a maximum particle size.
- SSDs and other flash media store data in small memory chips. A chip can pass through a coarse shred intact, so destruction standards call for much smaller particle sizes for flash than for hard drives. Confirm that the vendor's equipment is rated for SSDs before assuming a shred is enough.
Shredding vs. other destruction methods
| Method | Works on | Assurance | Notes |
|---|---|---|---|
| Drilling or punching | HDDs and SSDs | Lower | Cheap and in-house, but holes can miss platters or chips; needs a set pattern and inspection |
| Shredding | HDDs, SSDs, tape, phones, flash | High | Consistent results and audit records; costs more and usually involves a vendor |
| Degaussing | Magnetic media only (HDDs, tape) | High on magnetic media with properly rated equipment | Does not erase SSD or flash storage; leaves an HDD unusable |
| Incineration | All media | Very high | Done at specialized facilities with environmental controls |
Shredding vs. wiping
Wiping (overwriting every sector, the drive's built-in secure erase or sanitize command, or crypto-erase on an encrypted drive) leaves the drive usable, so it is the choice when hardware will be reused, donated, resold or returned at the end of a lease. Shredding is permanent: no reuse, and usually no warranty return. Choose shredding when a drive has failed and cannot be wiped or verified, when it held sensitive or regulated data, when policy requires destruction, or when large numbers of drives reach end of life. Deleting files or running a quick format is neither; the data stays recoverable.
Proof of destruction and chain of custody
When a vendor shreds drives, you rarely watch it happen, so documentation is the evidence. A useful certificate of destruction lists the vendor, the date and location, the method, the serial numbers or asset tags of each drive, the quantity, and a pickup manifest or witness signature. Vague entries such as "misc drives" should prompt a request for a detailed report. Chain of custody records who handled each drive from removal to destruction, which closes the gap where a drive could go missing in transit. On-site shredding reduces that transport risk.
Drive shredding on the CompTIA A+ exam
Shredding is one of the physical destruction methods in Core 2 (220-1202) objective 2.9, data destruction and disposal, alongside drilling, degaussing and incineration, and the same objective covers certificates of destruction from third-party vendors. If a question asks how to destroy SSDs that held sensitive data, shredding (or incineration) fits and degaussing does not. If it asks how an organization proves an outside vendor destroyed its drives, the answer is a certificate of destruction. If the computers are being donated or reused, the answer is a verified wipe, not shredding. Degaussing an SSD is always a wrong answer.