This is terribly disturbing. I had no idea that copy machines have what is essentially a hard drive that stores images of everything that has been scanned, faxed, copied or emailed. When those used machines get sold, identity thieves potentially have a goldmine of personal information to use against us. We have a choice not to xerox anything personal on copy machines in places like Office Depot or Staples, but what about the machines in our doctors' offices, the DMV, our banks? We have no control over that.
I'm not sure how old this report is, but I can't imagine that much has been done.