When vehicles are taken out of service, they can be sold with some (or all) of the IT components installed. This could allow third parties to access the IT components and thereby obtain internal information or personal data, such as stored telephone numbers. In addition, an organisation's own components (e.g. SIM cards or crypto modules) can remain in the vehicles. Subsequent owners could thus gain unintentional access to them and could, for example, read information from these components (such as telephone numbers from the SIM card) for illegal purposes.