I got home yesterday to find a small package on my doorstep that I never ordered or had any tracking info for. Inside was just a plain USB drive with no label or note. I haven’t plugged it into any of my devices yet because I’m worried it might be some kind of malware or hacking attempt. I work from home and handle sensitive client info, so I’m extra cautious about security. I've read stories about USB drops being used to infect computers, but I’m not sure what the safest approach is here. I want to figure out if this is a prank, a mistake, or a real threat. Has anyone else experienced receiving mysterious USB drives out of the blue? What steps did you take to check if it was safe or to protect your data? Would just plugging it into a disconnected or older device to scan it be a better idea, or should I just dispose of it somehow? Also, should I report this to my workplace’s IT or local authorities? What’s the best way to handle this without risking my work or personal info?

On 02/09/2026 at 3:55 PM, bright_porto64 said:

I got home yesterday to find a small package on my doorstep that I never ordered or had any tracking info for. Inside was just a plain USB drive with no label or note. I haven’t plugged it into any of my devices yet because I’m worried it might be some kind of malware or hacking attempt. I work from home and handle sensitive client info, so I’m extra cautious about security. I've read stories about USB drops being used to infect computers, but I’m not sure what the safest approach is here. I want to figure out if this is a prank, a mistake, or a real threat. Has anyone else experienced receiving mysterious USB drives out of the blue? What steps did you take to check if it was safe or to protect your data? Would just plugging it into a disconnected or older device to scan it be a better idea, or should I just dispose of it somehow? Also, should I report this to my workplace’s IT or local authorities? What’s the best way to handle this without risking my work or personal info?

Finding a random USB drive on your doorstep is definitely unsettling, especially when you’re handling sensitive info. I wouldn’t risk plugging it into any device connected to your work or personal network. If you have an old, standalone computer that’s never connected to the internet or your work systems, that’s the safest place to check it out. Otherwise, some local computer repair shops or IT pros might be able to safely scan it for malware without exposing your data.

Also, letting your workplace IT know about it sounds smart - they might have protocols for this kind of thing or can help monitor for any suspicious activity. Reporting it to local authorities could be useful too, especially if others in your area get similar packages. Better safe than sorry with these mystery drives!