Verizon sent man a refurbished phone with MDM, then deleted his data remotely

Verizon made a serious error when it sent a customer a refurbished phone that still had a Mobile Device Management (MDM) profile installed. The software gave the company remote control over the device, and it eventually deleted all of the customer's data.

Tom Collery called Verizon in February because he was having network problems, including dropped calls. The company responded by sending him a replacement phone, a Samsung Galaxy Z Flip7. Instead of a properly wiped refurbished device, Collery received a store demo unit that was still managed by Verizon's MDM software.

MDM is typically used by companies to monitor and control company owned devices. In this case, it allowed Verizon to remotely trigger a complete reset of the phone after Collery had been using it for a couple of weeks. All of his data was erased without warning.

The incident raises serious questions about Verizon's process for preparing refurbished devices. A demo unit should have been wiped clean of any management profiles before being sent to a customer. That clearly did not happen here.

For anyone using AI tools in their work, this story is a reminder of how much control device management software can give to organizations. If a company like Verizon can make this mistake, it highlights the importance of understanding what software is running on your devices and who has access to your data.