Auction site mobile data terminals.
I know of several people who thought they could just buy an old used police mobile data terminal off of an auction site and get into NCIC and other databases. Not the brightest bunch, but one terminal I bought for "parts" as it was advertised, did not have its hard drive wiped. The main CPU needed a new DC power connector.
After bypassing this and wiring DC power to the CPU, I saw: old reports, software for controlling sirens and radios, and access credentials for NCIC access. Now the certificates were old and there was still no way to actually gain access to the NCIC database. But it did give a lot of information on how this particular PD set up their network.
Just like any properly set up network, there are many checks and balances to ensure only the correct people have access to databases and personal information.
The particular seller and PD, were alerted to this CPU hard drive not being wiped and told that they should pay more attention in the future. I then wiped it myself and put it into service for an industrial control computer as it was intended.
(This was specifically a Motorola MW-520 system, so it had not been in use since 2004. So the PD's network had been upgraded several times since then.)
