Organizations and individuals are still leaving critical data on disks later sold on through online auctions and computer fairs, according to a new study.