That's exactly the threat full disk encryption is designed for.