We know it seems simple enough: plug in a USB drive, copy the files over, done. So you might be wondering why we ask clients not to bring USB drives to appointments. The short answer is that it’s about keeping your information – and ours – safe. Here’s an explanation of why, and what to do instead.
The problem with USB drives
USB drives are incredibly convenient, which is exactly what makes them a security risk. Unlike files sent over the internet, a USB drive plugs directly into a computer and bypasses most of the security tools we rely on. Here’s what can go wrong:
Malware can spread without you knowing
A USB drive can carry viruses, ransomware, or spyware – even if you’ve never intentionally downloaded anything harmful. Malware can quietly hitch a ride on a drive that’s been connected to another infected computer. The moment the drive is plugged into our systems, that infection can spread to our entire network within seconds, before any scan has a chance to catch it.
Some attacks don’t even need files on the drive
There’s a type of cyberattack called “BadUSB” where the USB device itself is reprogrammed to act like a keyboard or network adapter. When plugged in, it can silently run commands on the computer – and no antivirus software will flag it, because it looks like a legitimate device. You don’t need to have done anything wrong for this to happen; these drives are sometimes distributed or sold without the owner’s knowledge.
We have no way to verify where a drive has been
Unlike files sent through a secure upload link, we have no visibility into the history of a personal USB drive – what computers it’s been connected to, what software those computers were running, or whether those machines were compromised. That’s not a reflection on our clients; it’s simply a reality of how these devices work.
A breach can affect everyone
If a piece of malware introduced via a USB drive were to compromise our systems, it could put client data – potentially your data – at risk. We take that responsibility seriously, and our no-USB policy is one of the ways we honor it.
How to send us your files securely
We’ve made it easy to share files with us without any of these risks. Our secure file upload portal is available any time, from any device:
Just click the link, upload your files, and you’re done. There’s no account required, your files come through securely, and we receive them right away. If you’re heading in for an appointment, you can upload in advance so everything is ready to go when you arrive.
Further reading: finding your files and sending your art
What to do if you’re not sure
If you’re having trouble with the upload link or aren’t sure which files to send, just give us a call or send us a message before your appointment. We’re happy to walk you through it.
We appreciate your understanding, as this policy exists to protect you just as much as it protects us.