4 ms·

The title I'm seeing is > Google Cloud accidentally deletes UniSuper’s online account due to ‘unprecedented misconfiguration’ which is a lot more alarming. I

The title I'm seeing is > Google Cloud accidentally deletes UniSuper’s online account due to ‘unprecedented misconfiguration’ which is a lot more alarming. I've heard of sudden and unwarranted bans before, but never an accidental deletion of a customer who they only just convinced to migrate to Google Cloud last year!

abrookewood 2y ago
Pretty much what this update says: https://www.itnews.com.au/news/unisupers-google-cloud-environment-was-deleted-607786 https://www.itnews.com.au/news/unisupers-google-cloud-enviro... Just incredible that their entire account, spanning two geographies, was entirely deleted.
- tiew9Vii 2y ago
  Yes, surprised this hasn't hit the top of Hacker News and instead gone un-noticed. If Google did delete the account, this is massive. Large financial pension fund with advertised $124 billion in funds under management so not some toy cat gif startup has account deleted accidentally by Google. That can very easily wipe out a company using cloud as cloud vendors advertise you to. From the article it sounds like they are lucky they had offsite backups but still potential for data loss and restoring offsite backups likely a task in itself. It's a major incident, I feel for the ops team who'll be working under massive pressure trying to get everything back up.
  - dualscyther 2y ago
    Indeed. My gut feeling is that most companies using AWS, Azure or Google Cloud are not going to be making backups elsewhere. I wonder how much data would've been lost if they didn't have backups elsewhere?
    - abrookewood 2y ago
      I would imagine all of it. The underlying data is going to be on encrypted volumes and I'd expect deleting them would render the data non-recoverable.
    - octodog 2y ago
      Interestingly the Australian financial services regulator (APRA) has a requirement that companies have a multi-cloud plan for each of their applications. For example, a 'company critical' application needs to be capable of migrating to a secondary cloud service within 4 weeks. I'm not sure how common this regulation would be across industries in Australia or whether it's something that is common in other countries as well.
      - toomuchtodo 2y ago
        US federal financial regulators and NYDFS have similar concerns and strong opinions, but nothing in statute or regulatory rule making yet (to my knowledge; I haven’t had to sit in those meetings for about 2 years).
  - sumedh 2y ago
    > surprised this hasn't hit the top of Hacker News and instead gone un-noticed. Most people outside Aus dont know about UniSuper so HN probably assumed its a small company so not really important.

abrookewood 2y ago

Pretty much what this update says: https://www.itnews.com.au/news/unisupers-google-cloud-environment-was-deleted-607786 https://www.itnews.com.au/news/unisupers-google-cloud-enviro... Just incredible that their entire account, spanning two geographies, was entirely deleted.

tiew9Vii 2y ago
Yes, surprised this hasn't hit the top of Hacker News and instead gone un-noticed. If Google did delete the account, this is massive. Large financial pension fund with advertised $124 billion in funds under management so not some toy cat gif startup has account deleted accidentally by Google. That can very easily wipe out a company using cloud as cloud vendors advertise you to. From the article it sounds like they are lucky they had offsite backups but still potential for data loss and restoring offsite backups likely a task in itself. It's a major incident, I feel for the ops team who'll be working under massive pressure trying to get everything back up.
- dualscyther 2y ago
  Indeed. My gut feeling is that most companies using AWS, Azure or Google Cloud are not going to be making backups elsewhere. I wonder how much data would've been lost if they didn't have backups elsewhere?
  - abrookewood 2y ago
    I would imagine all of it. The underlying data is going to be on encrypted volumes and I'd expect deleting them would render the data non-recoverable.
  - octodog 2y ago
    Interestingly the Australian financial services regulator (APRA) has a requirement that companies have a multi-cloud plan for each of their applications. For example, a 'company critical' application needs to be capable of migrating to a secondary cloud service within 4 weeks. I'm not sure how common this regulation would be across industries in Australia or whether it's something that is common in other countries as well.
    - toomuchtodo 2y ago
      US federal financial regulators and NYDFS have similar concerns and strong opinions, but nothing in statute or regulatory rule making yet (to my knowledge; I haven’t had to sit in those meetings for about 2 years).
- sumedh 2y ago
  > surprised this hasn't hit the top of Hacker News and instead gone un-noticed. Most people outside Aus dont know about UniSuper so HN probably assumed its a small company so not really important.