E-waste is discarded electronic equipment such as phones, routers, appliances, and embedded devices. In cybersecurity, it matters because “thrown away” hardware is often still powered, inspectable, or partially recoverable. Storage chips, firmware, configuration data, identifiers, and logs may survive long after a device is abandoned, making e-waste a useful source for analysis by both defenders and attackers.
Recovered devices can reveal how a product authenticates users, what services it contacts, and whether sensitive data was properly erased. Attackers may salvage hardware to study protocols, clone identifiers, extract secrets, or test whether a device can be revived with weak identity checks. Defenders use secure disposal, verified wiping, encryption, and physical destruction when needed to reduce this exposure. The core lesson is that e-waste is not automatically inert; it can remain a live security object with enough residual state to be useful.