In a significant glitch, Google Cloud unintentionally deleted data belonging to UniSuper, an Australian pension fund, due to an unchecked box on an online form.
The mishap transpired in 2023 during an effort to manage UniSuper’s cloud storage via Google Cloud. An overlooked checkbox initiated a command for unplanned data removal, erasing vital pension fund data without warning.
The unchecked box resulted in a “blank parameter” attributing a one-year lifespan to the stored data. As this lifespan concluded, considerable data quantities faced abrupt deletion. The insufficient number of checks in place during the recovery process led to severe lapses and loss of decades’ worth of key records.
UniSuper’s data, amounting to AUD 135 billion (around USD 90 billion) tied to 647,000 Australians, was automatically deleted after a year.
Google Cloud mishap erases massive pension data
The unintended data removal has had a profound impact on the pension fund industry.
Google, however, denied any fault of the user or system. The tech giant cleared that neither the user nor the system was at fault, and no prior intimation about the deletion was provided as the customer hadn’t initiated the process.
It took around two weeks for the data restoration. Both Google and the customer worked diligently to recover the lost data, restoring UniSuper’s network and security configurations on Google Cloud VMware Engine Private Cloud.
The meticulous restoration process involved a secure upload of encrypted backups to the cloud. It successfully recovered the lost data while also enhancing UniSuper’s stability and resilience on the cloud platform ensuring its business continuity.
The incident emphasizes the significance of implementing sturdy security measures, regular audits, and thorough checks with cloud-based storage services. Potential breaches should always be anticipated with stringent protocols in place.
Securing data from internal threats is equally important as from external ones; thus, affirming the need for robust security systems. Regular reinforcement and communication related to data handling and storage should be emphasized.
Nonetheless, organizations can consider investing in advanced technologies like data encryption, multi-factor authentication, real-time threat detection, and data loss prevention for a stronger security perimeter.
All in all, this incident should serve as a learning opportunity to improve practices and formulate comprehensive strategies for a secure digital future.
