In 2010, a CBS News team paid about $300 for a used copier off a New Jersey warehouse floor, pulled the hard drive, and printed out roughly 300 pages of stored documents: prescriptions, blood-test results, one cancer diagnosis. The machine had been leased by a health insurer and returned at the end of its term with the drive untouched. That single copier helped trigger a $1,215,780 federal settlement, and the insurer estimated the records of about 344,000 people had been exposed.
The uncomfortable part for any Florida office: that was not a hack. Nobody broke in. A business simply handed a copier back at lease-end the way almost everyone does, and every scan, fax, and copy it had ever made went out the door with it.
Your office copier is a computer with a hard drive, and it keeps an image of much of what you copy, scan, print, and fax. When a lease ends and the machine is returned, that drive leaves your building unless someone clears it first. A reset button does not do it. Before pickup you need to either (1) run the copier’s built-in overwrite, (2) have the drive removed and handed to you, or (3) get written proof the leasing company wiped it, ideally a certificate of data destruction. Which one you need depends on how sensitive your documents are.
I place and pull these machines across Orlando and Central Florida every week, and end-of-lease is the moment I watch careful offices get careless. It is rarely laziness. More often, nobody ever told them the copier keeps an image of what it scans, so a law office or a medical practice hands a machine back at term-end without a second thought about the drive inside it. Here is the whole thing in plain English, and exactly what to do before the truck shows up.
- Does your copier actually store data?
- What happens to that data when the lease ends
- Why “we did a factory reset” is not enough
- The three real ways to clear a copier
- Xerox, Ricoh, and Kyocera each have a built-in wipe
- Can I just pull the hard drive out myself?
- What actually happens when we pick up your machine
- Your end-of-lease data-security checklist
- Key takeaways
- FAQ
Does your office copier actually store data?
Yes. Almost every business multifunction copier made in the last fifteen years has a hard disk drive inside it, and the Federal Trade Commission is blunt about what that drive holds: it “stores data about the documents it copies, prints, scans, faxes or emails.” The drive is not an accident or a bug. The machine needs it to queue jobs and hold large files while it works.
What surprises people is how much sticks around. A copier does not keep a tidy list of “the last ten things.” Depending on the model and its settings, it can retain image data from thousands of past jobs, and some machines let staff save documents directly on the device to reprint later. Those often sit in a separate area that a routine cleanup never touches. If your office scans contracts, HR files, patient forms, tax returns, or anything with a name and a number on it, assume a copy is on that drive right now.
What happens to that data when the lease ends
Here is the mechanics of the risk. Most business copier leases run 36 to 63 months and are non-cancelable, so at term-end the machine goes back to the leasing company or its agent. From there it is typically refurbished and re-leased, or sold wholesale, the same warehouse-to-resale path that put the health insurer’s copier in front of a CBS crew. If nobody cleared the drive, whoever ends up with that machine ends up with your files.
The FTC frames a copier’s life as a cycle of acquire, use, and return, and warns that the return step is where sensitive data most often escapes, because the business no longer controls the machine but the data is still on it. That is precisely what the federal government found in the health-insurer case: the company had returned multiple leased copiers to leasing agents without erasing the hard drives, and the exposure of protected health information is what drove the settlement. The lesson translates to any industry. A returned copier is a data-disposal event, and it deserves the same care you would give a dead server or a stack of paper files headed for the shredder.
Why “we did a factory reset” is not enough
This is the myth that gets offices in trouble, so it is worth being precise. Resetting the machine, deleting files, or reformatting the drive does not erase your data. The FTC spells it out: deleting or reformatting “doesn’t actually alter or remove the data, but rather alters how the hard drive finds the data.” The files stay on the disk and can be pulled back with recovery software that anyone can download.
Think of it like tearing the table of contents out of a book. The chapters are all still there; you have just removed the index that points to them. To actually destroy the data you have to overwrite it, writing new random characters over the old bits so there is nothing left to reconstruct, or physically take the drive out of the equation. A reset button does neither. If a vendor or a colleague tells you the copier is “wiped” because they reset it, that is not a wipe.
The three real ways to clear a copier: overwrite, remove, destroy
There are exactly three methods that actually work, and the right one depends on how sensitive your documents are and what your lease allows. Here is the honest trade-off on each.
| Method | What it is | Best for | Watch out for |
|---|---|---|---|
| Overwrite (data sanitization) | The machine writes random data over the drive so old files can’t be recovered | Most offices; standard confidential business documents | Must be run before the machine leaves; confirm it completed |
| Remove the drive | A technician pulls the physical drive and hands it to you to keep or destroy | Medical, legal, financial, and government offices with strict rules | Copier drives carry firmware, so removal must be done right or the machine won’t run |
| Physical destruction | The removed drive is shredded or degaussed, usually with a certificate | The highest-sensitivity records; when you want proof it’s gone | An added service and cost; only applies after the drive is removed |
For most Central Florida offices, a properly run overwrite is enough and is the least disruptive. When the documents are regulated, say a Lake Nona medical practice, a downtown Orlando law firm, or an accounting office in tax season, I steer clients toward drive removal or destruction with paperwork, because “we ran the overwrite” is harder to prove to an auditor than a signed certificate is.
Xerox, Ricoh, and Kyocera each have a built-in wipe — here’s what it’s called
Good news that most businesses never hear: the overwrite tool is usually already built into the copier you are leasing. The three brands we place most across Florida each ship it under a different name, which is half the reason nobody uses it.
| Brand | Built-in security | What it does |
|---|---|---|
| Xerox | Image Overwrite | Overwrites job data on demand (before removal), immediately after each job, or on a daily schedule; one- or three-pass depending on model |
| Ricoh | DataOverwriteSecurity System (DOSS) | Overwrites temporary job data with random 1s and 0s after each job; hard-drive encryption is also available |
| Kyocera | Data Security Kit | Encrypts data with AES before it is written to the drive, and adds overwrite methods you can switch on |
The pattern is the same across all three: encryption keeps a pulled drive unreadable, and overwrite clears the working data. On the Ricoh copiers we place in Orlando and the Kyocera machines across Central Florida, these features are frequently sitting switched off from the factory. Turning on an automatic overwrite after each job, on day one of the lease, means there is far less to worry about on the day it ends.
Can I just pull the hard drive out myself?
Usually not a good idea, and the FTC agrees. Copier hard drives “often include required firmware that enables the device to operate,” so yanking the drive can leave you with a machine that will not run, “which may present problems if you lease the device,” since you are contractually on the hook to return it in working order. On top of that, the drives are not always easy to find, and some machines have more than one.
So the DIY route can create two problems at once: a broken copier you now owe the leasing company for, and a false sense that the data is handled when a second drive is still inside. The FTC’s own guidance is to work with skilled technicians rather than remove the drive yourself. That is the whole point of asking your dealer to handle it. Done right, the machine stays leasable and the data is genuinely gone.
What actually happens when we pick up your machine
Because I get asked what “handled” actually looks like, here is our standard end-of-lease routine on a Central Florida pickup, and what a good vendor should do regardless of who you lease from:
- Before the truck is scheduled, we confirm what the machine held. A front-desk copier and a copier in a medical records room are not the same risk, and they should not get the same treatment.
- We run the built-in overwrite while the machine is still in your office, not later at a warehouse where you cannot see it. A Spiceworks thread from a sysadmin describes their vendor doing exactly this: resetting and clearing the copier on-site before it is ever loaded up. That on-site step is what you want.
- For regulated offices, we remove the drive and hand it to you, or destroy it and give you a certificate of data destruction, a piece of paper you can put in a compliance file.
- We confirm the lease is truly closed so the machine does not quietly evergreen into another term after it is gone. If you are already tangled in that, here is how to get out of a copier lease early.
None of this is exotic or expensive. It is a fifteen-minute conversation and a routine most offices simply never had, because the copier salesperson was focused on the lease, not the return.
Your end-of-lease data-security checklist
Run this before any leased copier or printer leaves your building:
- Ask what is on the drive. Confirm the machine even has one (nearly all business copiers do) and what kinds of documents ran through it.
- Do not rely on a factory reset. Deleting and reformatting leaves the data recoverable. Insist on an overwrite or drive removal.
- Run the built-in overwrite on-site, and get confirmation it completed (Xerox Image Overwrite, Ricoh DOSS, or the Kyocera Data Security Kit, depending on your machine).
- For regulated data, remove or destroy the drive and get a certificate of data destruction in writing.
- Check your lease language. The FTC recommends confirming your contract says either you keep ownership of the hard drives at end-of-life, or the leasing company will overwrite them. We cover this in what’s actually in a copier lease agreement.
- Get it in writing. Whatever method you use, keep proof: an overwrite confirmation, a removal receipt, or a destruction certificate.
- Business copiers store an image of what they copy, scan, print, and fax on an internal hard drive.
- Returning a leased copier without clearing that drive is a data-disposal event, and it is how a health insurer ended up with a $1.2 million federal settlement over about 344,000 records.
- A factory reset, delete, or reformat does not erase the data; only overwriting or removing the drive does.
- Your Xerox, Ricoh, or Kyocera copier almost certainly has a built-in overwrite already. Turn it on at the start of the lease.
- Don’t pull the drive yourself; copier drives carry firmware, and you can break a machine you are obligated to return.
- For regulated offices, remove or destroy the drive and keep a certificate. For everyone, get written proof.
Frequently asked questions
Do all office copiers store data on a hard drive?
Nearly all business multifunction copiers made in roughly the last fifteen years do. The drive holds job data for documents the machine copies, prints, scans, faxes, or emails. Small desktop printers may not have a drive, but the shared office copier almost always does.
What happens to my data when I return a leased copier?
Unless the drive is cleared first, the data leaves with the machine. Returned copiers are usually refurbished and re-leased or sold, so your files can end up with the next owner. Clear the drive before the machine is picked up.
Does a factory reset erase a copier’s hard drive?
No. The FTC is explicit that deleting or reformatting does not remove the data. It only changes how the drive indexes it, and the files can be recovered with utility software. You need an overwrite or physical drive removal.
How do I wipe a copier hard drive before returning it?
Run the machine’s built-in overwrite (Xerox Image Overwrite, Ricoh DOSS, Kyocera Data Security Kit) while it is still in your office, or have a technician remove the drive. Then keep written confirmation it was done.
Can I remove the hard drive from a leased copier myself?
It is risky. Copier drives often carry firmware the machine needs to operate, so removing it can leave you with a copier that will not run, a problem when you are contractually required to return it working. Some machines also have more than one drive. Have a technician do it.
Is a returned copier a HIPAA problem?
It can be. A medical office that returns a copier with un-erased protected health information on the drive can face a reportable HIPAA disposal failure, the exact issue behind the health-insurer settlement. Remove or destroy the drive and document it.
Returning or upgrading a copier soon? Before anything leaves your office, we’ll tell you what’s on the drive and clear it the right way — an overwrite, a drive removal, or destruction with a certificate — on any machine, whether we placed it or not. Talk to our copier service and support team in Florida, or get a plain-English quote on copier leasing in Orlando.
Ask us to clear your copier the right way