Redbox left PII on decommissioned machines

Are there any laws in any country governing how such equipment is supposed to be decommissioned in case if bankruptcy?

This does not seem to be an isolated case, it just happening more and more with advance of technology.

What are they going to do? Sue the bankrupted company?

If instead of a load of old computers the bankrupt company had a pile of old tyres, I'd expect the receivers winding up the bankrupt company would dispose of the old tyres properly, paid for with the company's assets before anything is distributed to creditors.

If someone creates this fucked up compute stack and handles the customer data this poorly, what makes you think they would be any better at disposal even if there was some laws around it? It is not like law makers have any idea either what is going on.