Japan Lost a Whole City's Data in a Bar. It Was on a USB Stick.

Picture the thing you least want anyone else to see. Now picture where it actually lives right now. Is it on a small drive in a drawer? On a USB stick in a bag, a jacket pocket, a desk organizer? If so, you are not alone — and that is exactly the problem. The thing you are protecting is sitting inside something designed to be picked up and carried away.

This is not a story about hackers. It is a story about human beings, and the objects they carry.

A City's Records, Left Behind After a Drink

In June 2022, in Amagasaki, Japan, a subcontractor working for the city went out drinking in an izakaya. When he left, he no longer had the bag he had arrived with. Inside it was a USB stick holding the personal information of roughly 460,000 residents.

Let that sit for a moment. Not a server breach. Not a sophisticated intrusion. A whole city's records, on a stick smaller than your thumb, in a bag, in a bar, after a night out.

The stick was found the next day, and the city said there was no confirmed leak. That is the part of the story people remember, and it is the wrong part to remember. Getting it back was luck. Luck is not a system. If the person who found it had been curious instead of honest, or if it had slipped down a drain, or into a taxi, or into a bin, the story would have ended very differently — and no one involved would have had any way to undo it.

Amagasaki was not an anomaly. It was a demonstration.

Heathrow, Five Years Earlier, Same Shape

In 2017, a USB stick carrying security files relating to the Queen was found by a passerby on a street near Heathrow Airport in London. Again, no hacking was involved. Nobody defeated a firewall or cracked a password. A small object left the place it belonged, and a stranger picked it up.

These stories keep recurring because they are not really about technology at all. They belong to a genre every office worker knows: the urban legend of the USB stick lost in an airport, in a taxi, in a bar, in a hotel room. We tell these stories and laugh, because the alternative — admitting how much rides on something so losable — is uncomfortable.

The pattern is always the same. The object is small. The object is portable. The object ends up somewhere it should never have been. And the person carrying it is, on that particular day, tired, distracted, or a few drinks in.

Portability Is Losability

This is the first hard truth about a single drive or stick: the very quality that makes it convenient is the quality that makes it dangerous. You bought it because you could carry it. That means anyone else could carry it too — out of your bag, off your desk, out of your home.

A USB stick does not announce itself when it goes missing. There is no alarm. You notice hours later, or days later, when you reach for it and it is not there. By then you cannot retrace every place your bag has been, every hand that might have brushed past it, every surface it might have slipped off. The window in which you could have done something about it has already closed.

And here is the second hard truth: a single copy is a single point of failure. Lose it once, and there is no second chance. There is no backup to restore, no other version sitting somewhere safe. The thing is either found, by luck, or it is gone. Every plan that depends on one small object is a plan with exactly one way to fail — and that way is the most ordinary thing in the world: misplacing it.

Encryption Stops Reading. It Does Not Stop Losing.

At this point, someone usually says: but it was encrypted. And that is worth addressing honestly, because it is both true and beside the point.

Encryption, properly done, can keep a stranger from reading what is on a drive. What it cannot do is keep the drive from being lost. It cannot keep it from being found. It cannot stop curiosity — the simple human question of "what is this?" that does not need a password to exist. And it certainly cannot bring the object back once it has walked out the door.

A locked box that has been stolen is still a stolen box. The fact that the thief cannot open it today does not return it to you, does not erase the weeks you spent wondering who has it, and does not restore the only copy of something irreplaceable. Security that only answers the question "can they read it?" has not answered the question "where is it, and who has it?"

That distinction matters more than most security advice admits. Most of what we worry about with private material is not really about code-breaking. It is about discovery. It is about the wrong person finding out that something exists, and then having it in their hands. A password does nothing against that moment.

Your Home Is Not a Hiding Place Either

If the single drive is the first familiar answer, hiding it at home is the second. A drawer. The bottom of a closet. Under the bed. It feels private because it is yours. But a home is not a sealed room — it is a place people move through.

A partner tidies up. A child explores. A cleaner works through the rooms. A plumber comes to fix a leak. Movers carry boxes out during a relocation, and a box that mattered looks exactly like every other box. None of these people are villains. They are just people, in your space, doing ordinary things — and ordinary things are how private material gets seen.

A home safe does not solve this either, and it is worth being blunt about why. A safe is built to resist fire and, to a degree, forced entry. It is not built to resist being noticed, and it is not built to resist being carried away whole. Safes get stolen — lifted out of homes by people who do not bother opening them on the spot. A safe stops a flame. It does not stop a person, and it does not stop a removal. And a safe in your own home still sits in the one place where everyone who knows you already knows to look.

The uncomfortable summary is this: there is no corner of a home that is truly "where nobody will find it." If you live there, other people come there. If other people come there, the hiding place is shared, whether you meant it to be or not.

What Actually Changes the Odds

So what does a better arrangement look like? It does not start with a cleverer gadget. It starts with removing the single points of failure, one by one.

First, there is more than one copy, and the copies do not live in the same place. Lose one, and the other still exists. That alone ends the nightmare scenario in which a single misplaced object means total loss.

Second, each copy is sealed and numbered when it is received, and its condition is recorded — so that any interference leaves a trace, and so that you are not relying on anyone's memory about what arrived and when.

Third, more than one person verifies it. One pair of eyes can miss something, or be persuaded, or be careless on a bad day. Two people, checking each other, is a different kind of arrangement — not because anyone is distrusted, but because human beings are fallible, and a process that assumes otherwise is not a process.

Fourth, custody is someone's actual job. Not a drawer you remember to check, not a bag you promise yourself you will keep track of, but a dedicated place where the material is looked after, with a routine for it: by default, a semi-annual visual check of the seal and outward appearance, with a photograph on record, and no contact with the contents themselves. Anything beyond that — any closer inspection — happens only if you have asked for it in writing. The default is deliberately hands-off, because the whole point is that the material should sit undisturbed.

None of this is glamorous. There is no clever device at the center of it, and that is the point. The risk was never really the device. The risk was the chain of ordinary human moments — a drink, a tidy-up, a move, a moment of distraction — through which a small object changes hands. The answer is not a stronger object. It is a process built around the knowledge that objects get lost, and people get distracted, and that the system has to survive both.

Seneca once observed that we suffer more in imagination than in reality — but the anxiety that keeps people awake about private material is not imaginary. It is the very real knowledge that everything they want kept unseen currently depends on their own memory, their own bag, their own drawer, on never having a bad day. That is a heavy thing to carry alone, and it is an unfair thing to ask of any single object.

The weakest link was never the encryption, or the drive, or the safe. The weakest link is the human carrying it. Build for that, and the fear finally has somewhere solid to rest.