Ordered a hard drive from Scan, got it, plugged it in. And it had a complete win7 system on it with personal data.
Called Scan, arranged for a RMA. But that's not the point. Why is a hard drive with data being sent out???! It obviously belongs to someone.
I unplugged it boxed it up and awaiting collection.
First time it's ever happened and I'm a bit shocked tbh.