Hacker News new | ask | show | jobs
by dualscyther 773 days ago
The title I'm seeing is

> Google Cloud accidentally deletes UniSuper’s online account due to ‘unprecedented misconfiguration’

which is a lot more alarming.

I've heard of sudden and unwarranted bans before, but never an accidental deletion of a customer who they only just convinced to migrate to Google Cloud last year!
1 comments
abrookewood 773 days ago
Pretty much what this update says: https://www.itnews.com.au/news/unisupers-google-cloud-enviro...

Just incredible that their entire account, spanning two geographies, was entirely deleted.

link
tiew9Vii 773 days ago
Yes, surprised this hasn't hit the top of Hacker News and instead gone un-noticed. If Google did delete the account, this is massive.

Large financial pension fund with advertised $124 billion in funds under management so not some toy cat gif startup has account deleted accidentally by Google. That can very easily wipe out a company using cloud as cloud vendors advertise you to. From the article it sounds like they are lucky they had offsite backups but still potential for data loss and restoring offsite backups likely a task in itself.

It's a major incident, I feel for the ops team who'll be working under massive pressure trying to get everything back up.

link
dualscyther 773 days ago
Indeed. My gut feeling is that most companies using AWS, Azure or Google Cloud are not going to be making backups elsewhere. I wonder how much data would've been lost if they didn't have backups elsewhere?
link
octodog 771 days ago
Interestingly the Australian financial services regulator (APRA) has a requirement that companies have a multi-cloud plan for each of their applications. For example, a 'company critical' application needs to be capable of migrating to a secondary cloud service within 4 weeks.

I'm not sure how common this regulation would be across industries in Australia or whether it's something that is common in other countries as well.

link
toomuchtodo 770 days ago
US federal financial regulators and NYDFS have similar concerns and strong opinions, but nothing in statute or regulatory rule making yet (to my knowledge; I haven’t had to sit in those meetings for about 2 years).
link
abrookewood 772 days ago
I would imagine all of it. The underlying data is going to be on encrypted volumes and I'd expect deleting them would render the data non-recoverable.
link
sumedh 770 days ago
> surprised this hasn't hit the top of Hacker News and instead gone un-noticed.

Most people outside Aus dont know about UniSuper so HN probably assumed its a small company so not really important.

link