Thinking about getting rid of your old Xbox? Be careful about where it lands next, because somewhere in there, your credit card details are just waiting to be cracked open by an enterprising hacker.

Information security researcher Ashley Podhradsky has found that even restoring the Xbox to its original factory settings doesn’t completely wipe the slate clean, either. In an interview with gaming blog Kotaku, the Dakota State PhD and Drexel professor said, “Microsoft does a great job of protecting their proprietary information, but they don’t do a great job of protecting the user’s data.”