In nihil's defense, when I hear about an organization that fails to wipe sensitive information off of hard drives because it is too noisy, the first thing that comes to mind is incompetence. There are so many ways that this could have been avoided. Sure DBAN can take a little while, but it is better than paying for credit monitoring for everyone affected. As previously stated... just remove the HDDs... then you could destroy them any number of ways. What was the hangup?