--- title: How Google Deleted $125 Billion Pension Fund Account description: Lessons from the UniSuper Google Cloud Outage - How Google Deleted $125 Billion Pension Fund Account. image: https://www.revyz.io/hubfs/Google%20Cloud%20Outage.png --- [Skip to content](https://www.revyz.io/blog/how-google-deleted-125-billion-pension-fund-account#main-content) Close - [Home](https://www.revyz.io/) - Solutions - [Data Compliance](https://www.revyz.io/solutions/data-compliance) - [Data Security](https://www.revyz.io/solutions/data-security) - [Administration](https://www.revyz.io/solutions/data-administration) - Use Cases - [Configuration Manager (Sandbox to Prod)](https://www.revyz.io/use-case/config-manager) - [Configuration Drift Analyzer](https://www.revyz.io/use-case/config-drift-analyzer) - [Configuration Docs and Dependencies](https://www.revyz.io/use-case/config-docs-dependencies) - [Xray Config Drift and Analytics](https://www.revyz.io/use-case/xray-config-drift-analytics) - [Backup & Granular Restore](https://www.revyz.io/use-case/backup-and-restore) - [Data Deletion Log](https://www.revyz.io/use-case/data-deletion-log) - [Audit Log Backup](https://www.revyz.io/use-case/audit-logs-backup) - [Third-Party App Data Backup](https://www.revyz.io/use-case/backup-third-party-app) - [Data Cloning](https://www.revyz.io/use-case/cloning) - [User License Insights](https://www.revyz.io/use-case/user-license-insights) - [Site Health & Optimization](https://www.revyz.io/use-case/site-health-optimization) - Products - Jira - [Command Center for Jira](https://www.revyz.io/products/command-center-for-jira) - [Configuration Manager](https://www.revyz.io/products/configuration-manage/jira) - [Assets Data Manager](https://www.revyz.io/products/backup/jira-assets) - Confluence - [Command Center for Confluence](https://www.revyz.io/products/command-center-for-confluence) - Bitbucket - [Command Center for Bitbucket](https://www.revyz.io/products/command-center-for-bitbucket) - [Resources](https://www.revyz.io/resources) - [Blog](https://www.revyz.io/blog) - [Resource Center](https://www.revyz.io/jira-cloud-resources) - About - [Company](https://www.revyz.io/about) - [Partners](https://www.revyz.io/partners) - New - [Command Center for Bitbucket](https://www.revyz.io/products/command-center-for-bitbucket) SEARCH [Get Started](https://marketplace.atlassian.com/vendors/1221393/revyz) [![](https://www.revyz.io/hubfs/RevyzLogo.svg)![Revyz Logo White](https://www.revyz.io/hubfs/White.svg)](https://www.revyz.io/) - [Home](https://www.revyz.io/) - Solutions NEW - Use Cases NEW - Products - [Resources](https://www.revyz.io/resources) - About - New [Get Started](https://marketplace.atlassian.com/vendors/1221393/revyz) Quick results for "{search\_term}" - [Data Compliance ➔](https://www.revyz.io/solutions/data-compliance) - [Data Security ➔](https://www.revyz.io/solutions/data-security) - [Administration ➔](https://www.revyz.io/solutions/data-administration) - [Configuration Manager (Sandbox to Prod) ➔](https://www.revyz.io/use-case/config-manager) - [Configuration Drift Analyzer ➔](https://www.revyz.io/use-case/config-drift-analyzer) - [Configuration Docs and Dependencies ➔](https://www.revyz.io/use-case/config-docs-dependencies) - [Xray Config Drift and Analytics ➔](https://www.revyz.io/use-case/xray-config-drift-analytics) - [Backup & Granular Restore ➔](https://www.revyz.io/use-case/backup-and-restore) - [Data Deletion Log ➔](https://www.revyz.io/use-case/data-deletion-log) - [Audit Log Backup ➔](https://www.revyz.io/use-case/audit-logs-backup) - [Third-Party App Data Backup ➔](https://www.revyz.io/use-case/backup-third-party-app) - [Data Cloning ➔](https://www.revyz.io/use-case/cloning) - [User License Insights ➔](https://www.revyz.io/use-case/user-license-insights) - [Site Health & Optimization ➔](https://www.revyz.io/use-case/site-health-optimization) Jira --- - [Command Center for Jira](https://www.revyz.io/products/command-center-for-jira) - [Configuration Manager](https://www.revyz.io/products/configuration-manage/jira) - [Assets Data Manager](https://www.revyz.io/products/backup/jira-assets) Confluence --- - [Command Center for Confluence](https://www.revyz.io/products/command-center-for-confluence) Bitbucket --- - [Command Center for Bitbucket](https://www.revyz.io/products/command-center-for-bitbucket) - [Resource Center](https://www.revyz.io/jira-cloud-resources) - [Blogs](https://www.revyz.io/blog) - [Company](https://www.revyz.io/about) - [Partners](https://www.revyz.io/partners) - [Command Center for Bitbucket](https://www.revyz.io/products/command-center-for-bitbucket) ![](https://www.revyz.io/hs-fs/hubfs/Google%20Cloud%20Outage.png?width=300&name=Google%20Cloud%20Outage.png) [Stu Lees](https://www.revyz.io/blog/author/stu-lees)Jun 12, 2024, 12:12:11 AM3 min read # How Google Deleted $125 Billion Pension Fund Account [Previous](https://www.revyz.io/blog/a-guide-to-regulatory-compliance-in-atlassian-cloud) [Next](https://www.revyz.io/blog/cybersecurity-nis2what-is-it-all-about) # How Google Deleted $125 Billion Pension Fund Account   In early May 2024, UniSuper, one of Australia's largest superannuation funds, faced a nightmare scenario that every cloud user dreads: their cloud provider, Google Cloud Platform (GCP), accidentally deleted their data. This incident not only disrupted services for over 600,000 pension fund members but also underscored the critical importance of robust disaster recovery (DR) planning and backup strategies. ### Background UniSuper, managing $125 billion AUD in retirement savings, relies heavily on GCP for its cloud infrastructure. The incident began with a misconfiguration during the provisioning of UniSuper’s Private Cloud services. Due to a bug in the creation script, the private cloud was mistakenly set up with a one-year subscription instead of a perpetual one. When the year elapsed, Google Cloud automatically deleted the private cloud, leading to a significant outage from May 2nd to 13th. ### What Went Wrong The deletion was triggered by a rare bug that caused a misconfiguration during the setup of UniSuper’s private cloud. This bug set the private cloud’s subscription to expire after one year, and upon expiration, Google Cloud dutifully deleted it. Unfortunately, this deletion affected data across multiple regions where UniSuper had duplicated its environment for redundancy. The outage impacted not only UniSuper's operations but also left more than half a million members without access to their accounts. Despite having geographical redundancy and third-party backups, restoring the data and services was an arduous process that took over a week. ### Analysis of the Incident Google Cloud’s response to the incident involved both [a joint statement with UniSuper](https://www.unisuper.com.au/about-us/media-centre/2024/a-joint-statement-from-unisuper-and-google-cloud)and a follow-up blog post explaining the details. While Google Cloud admitted fault, the communication throughout the incident was criticized for its lack of clarity and timeliness. UniSuper’s disaster recovery measures included backups with a third-party provider, which eventually enabled the recovery of their systems. However, the restoration process highlighted the complexity and time-consuming nature of recovering from such a large-scale deletion. ### Key Lessons Learned #### 1. Importance of Robust Backup Strategies The 3-2-1 backup rule, which advises maintaining three copies of your data on two different media with one offsite, proved crucial in this incident. UniSuper’s reliance on a third-party backup provider was a smart move that ultimately facilitated their recovery. #### 2. Necessity of Disaster Recovery Planning Geo-redundancy within the same cloud provider isn’t enough. This incident demonstrated the need for diversified DR strategies that include replication across different cloud providers to ensure availability and quick recovery. #### 3. Customer Responsibility in Cloud Environments Cloud providers often do not offer comprehensive DR guarantees. Customers must understand their role in maintaining DR plans and proactively mitigating risks, even when the cloud provider is at fault. #### 4. Importance of Detailed Communication Clear and transparent communication during an incident is essential. Google Cloud’s vague and delayed updates exacerbated the situation, highlighting the need for straightforward communication to manage customer expectations effectively. --- ## But What About Atlassian Cloud? The Atlassian Cloud platform has suffered a number of critical outages. Some of those outages resulted in lost Jira data and configuration data so, just like all enterprise SaaS environments, Atlassian is not immune to failure.    As recent as June 3rd, 2024, Atlassian Jira suffered a global [outage](https://jira-software.status.atlassian.com/incidents/6zvfcm26z79n)which, thankfully, did not result in any customer lost data.    ![JiraOutage-Disaster-Recovery-Planning-By-Revyz-Backups](https://www.revyz.io/hs-fs/hubfs/JiraOutage-Disaster-Recovery-Planning-By-Revyz-Backups.jpg?width=698&height=381&name=JiraOutage-Disaster-Recovery-Planning-By-Revyz-Backups.jpg) But previous incidents in Atlassian's cloud have resulted in lost services and data so we raised this to underpin the main point *that no cloud vendor is immune from disasters.* This is one of the reasons why Atlassian make it very clear to end customers that the backup and recovery of your Jira and Confluence data is the [responsibility of the end customer](https://www.revyz.io/guide-to-atlassian-shared-responsibility-model).  > "You need to go through that whole thing periodically and make sure everyone knows what their role is and what they're supposed to do." > > Alex Ortiz during [The Jira Life "Emergency Livestream - Jira is DOWN!"](https://www.youtube.com/watch?v=xghCNr5Ek4E&t=2270s)   ---   ### Recommendations for Cloud Users At the bare minimum, we recommend that you should; - Develop comprehensive backup and disaster recovery plans. - Regularly test and update your DR protocols to ensure they are current and effective. - Diversify their cloud service providers to minimize risk. - Maintain clear communication channels with their cloud providers to ensure timely and accurate updates during incidents. ### Conclusion The UniSuper Google Cloud outage serves as a stark reminder of the vulnerabilities in even the most sophisticated digital infrastructures. It underscores the necessity for robust disaster recovery planning and the importance of diversified backup strategies. By prioritizing DR, organizations not only protect their operations and data but also preserve their reputation and client trust. As a leader in data protection and disaster recovery in Atlassian cloud, our door is always open to discuss your situation.    ![avatar](https://www.revyz.io/hs-fs/hubfs/Stu%20Zeald%202%20web.jpg?width=290&name=Stu%20Zeald%202%20web.jpg) [Stu Lees](https://www.revyz.io/blog/author/stu-lees)Stu is the VP of Marketing and Partnerships at Revyz Inc. With a career spanning over 25 years in IT, Stu runs the global marketing and partnership teams for the Revyz business and is based in Auckland, New Zealand. Stu has worked in a wide variety of arenas that include 15 years in senior leadership roles in enterprise IT as well as running his own technology integration company from 2006-2013. Stu is involved as a leader in the Auckland Atlassian ACE group and speaks frequently in webinars on both cyber security and marketing. [mailto:stu.lees@revyz.io](mailto:stu.lees@revyz.io) RELATED ARTICLES ## Other Jira Backup Resources If you found this article on Jira Cloud Backups useful, then take a look at our new [Resource Center for Jira Cloud](https://www.revyz.io/jira-cloud-resources) ### Looking for a Jira Backup Solution? Review the featues of this award winning [Jira Backup](https://www.revyz.io/revyz-data-manager-for-jira) solution [![Revyz Data Manager for Jira Cloud 2024](https://www.revyz.io/hs-fs/hubfs/-revyz-2024-product/Revyz%20Data%20Manager%20for%20Jira%20Cloud%202024.png?width=250&height=169&name=Revyz%20Data%20Manager%20for%20Jira%20Cloud%202024.png)](https://www.revyz.io/revyz-data-manager-for-jira)     View Backup Features ### [Spin.AI Acquired Revyz: What It Means for Command Center Customers](https://www.revyz.io/blog/spin.ai-acquired-revyz-what-it-means-for-command-center-customers) ### [Team '26 Europe: A Look Back at Our Week in Amsterdam](https://www.revyz.io/blog/team-26-europe-a-look-back-at-our-week-in-amsterdam) ### [Protecting Your Engineering Estate: Why We Are Securing Bitbucket Cloud](https://www.revyz.io/blog/protecting-your-engineering-estate-why-we-are-securing-bitbucket-cloud) ### [Trusted Data for the AI Era: Meet Revyz at Atlassian Team '26 Europe](https://www.revyz.io/blog/trusted-data-for-the-ai-era-meet-revyz-at-atlassian-team-26-europe) [![Revyz Logo White](https://21176307.fs1.hubspotusercontent-na2.net/hubfs/21176307/Revyz%20Logo%20White.svg)](https://www.revyz.io/) Use Cases - [Configuration Manager (Sandbox to Prod)](https://www.revyz.io/use-case/config-manager) - [Configuration Drift Analyzer](https://www.revyz.io/use-case/config-drift-analyzer) - [Configuration Docs and Dependencies](https://www.revyz.io/use-case/config-docs-dependencies) - [Xray Config Drift and Analytics](https://www.revyz.io/use-case/xray-config-drift-analytics) - [Backup & Granular Restore](https://www.revyz.io/use-case/backup-and-restore) - [Data Deletion Log](https://www.revyz.io/use-case/data-deletion-log) - [Audit Logs Backup](https://www.revyz.io/use-case/audit-logs-backup) - [Third-Party App Data Backup](https://www.revyz.io/use-case/backup-third-party-app) - [Data Cloning](https://www.revyz.io/use-case/cloning) - [User License Insights](https://www.revyz.io/use-case/user-license-insights) - [Site Health & Optimization](https://www.revyz.io/use-case/site-health-optimization) Solutions - [Data Compliance](https://www.revyz.io/solutions/data-compliance) - [Data Security](https://www.revyz.io/solutions/data-security) - [Data Administration](https://www.revyz.io/solutions/data-administration) Product - [Command Center for Jira](https://marketplace.atlassian.com/apps/1228694/) - [Configuration Manager for Jira](https://marketplace.atlassian.com/apps/1231935/) - [Assets Data Manager for Jira](https://marketplace.atlassian.com/apps/1232736/) - [Command Center for Confluence](https://marketplace.atlassian.com/apps/1233056/) [![badge-mpac-light-filled](https://21176307.fs1.hubspotusercontent-na1.net/hubfs/21176307/badge-mpac-light-filled.svg)](https://marketplace.atlassian.com/vendors/1221393/revyz) Support & Learn - [Trust Center](https://trust.revyz.io/) - [Support Center](https://support.revyz.io/) - [Deployment Options](https://support.revyz.io/legal-security/storage-deployment-model) - [Contact](mailto:sales@revyz.io) ![Atlassian-Partner-Designation-Badge\_Platinum-Marketplace-Partner\_light-inverse\_RGB](https://21176307.fs1.hubspotusercontent-na2.net/hubfs/21176307/Atlassian-Partner-Designation-Badge_Platinum-Marketplace-Partner_light-inverse_RGB.svg) Resources - eBooks - [Blogs](https://www.revyz.io/blog) - [YouTube](https://www.youtube.com/c/SpinTechnology) - Sign-up for our blog ![Marketplace-Badges](https://21176307.fs1.hubspotusercontent-na1.net/hubfs/21176307/2025-Icons/Marketplace-Badges.svg) © 2026 Revyz. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "abstract" : "Lessons from the UniSuper Google Cloud Outage - How Google Deleted $125 Billion Pension Fund Account.", "author" : { "@type" : "Person", "name" : "Stu Lees" }, "dateModified" : "September 6, 2024 12 PM", "datePublished" : "June 12, 2024 4 AM", "headline" : "How Google Deleted $125 Billion Pension Fund Account", "image" : "https://21176307.fs1.hubspotusercontent-na1.net/hubfs/21176307/Google%20Cloud%20Outage.png", "inLanguage" : "en", "keywords" : "[Revyz, News, SaaS, SaaS Backup, security, best practices, Compliance]", "mainEntityOfPage" : { "@type" : "WebPage" }, "name" : "How Google Deleted $125 Billion Pension Fund Account", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://21176307.fs1.hubspotusercontent-na2.net/hubfs/21176307/RevyzLogo.svg" }, "name" : "Revyz Inc" }, "text" : "How Google Deleted $125 Billion Pension Fund Account In early May 2024, UniSuper, one of Australia's largest superannuation funds, faced a nightmare scenario that every cloud user dreads: their cloud provider, Google Cloud Platform (GCP), accidentally deleted their data. This incident not only disrupted services for over 600,000 pension fund members but also underscored the critical importance of robust disaster recovery (DR) planning and backup strategies. Background UniSuper, managing $125 billion AUD in retirement savings, relies heavily on GCP for its cloud infrastructure. The incident began with a misconfiguration during the provisioning of UniSuper’s Private Cloud services. Due to a bug in the creation script, the private cloud was mistakenly set up with a one-year subscription instead of a perpetual one. When the year elapsed, Google Cloud automatically deleted the private cloud, leading to a significant outage from May 2nd to 13th. What Went Wrong The deletion was triggered by a rare bug that caused a misconfiguration during the setup of UniSuper’s private cloud. This bug set the private cloud’s subscription to expire after one year, and upon expiration, Google Cloud dutifully deleted it. Unfortunately, this deletion affected data across multiple regions where UniSuper had duplicated its environment for redundancy. The outage impacted not only UniSuper's operations but also left more than half a million members without access to their accounts. Despite having geographical redundancy and third-party backups, restoring the data and services was an arduous process that took over a week. Analysis of the Incident Google Cloud’s response to the incident involved both a joint statement with UniSuper and a follow-up blog post explaining the details. While Google Cloud admitted fault, the communication throughout the incident was criticized for its lack of clarity and timeliness. UniSuper’s disaster recovery measures included backups with a third-party provider, which eventually enabled the recovery of their systems. However, the restoration process highlighted the complexity and time-consuming nature of recovering from such a large-scale deletion. Key Lessons Learned 1. Importance of Robust Backup Strategies The 3-2-1 backup rule, which advises maintaining three copies of your data on two different media with one offsite, proved crucial in this incident. UniSuper’s reliance on a third-party backup provider was a smart move that ultimately facilitated their recovery. 2. Necessity of Disaster Recovery Planning Geo-redundancy within the same cloud provider isn’t enough. This incident demonstrated the need for diversified DR strategies that include replication across different cloud providers to ensure availability and quick recovery. 3. Customer Responsibility in Cloud Environments Cloud providers often do not offer comprehensive DR guarantees. Customers must understand their role in maintaining DR plans and proactively mitigating risks, even when the cloud provider is at fault. 4. Importance of Detailed Communication Clear and transparent communication during an incident is essential. Google Cloud’s vague and delayed updates exacerbated the situation, highlighting the need for straightforward communication to manage customer expectations effectively. But What About Atlassian Cloud? The Atlassian Cloud platform has suffered a number of critical outages. Some of those outages resulted in lost Jira data and configuration data so, just like all enterprise SaaS environments, Atlassian is not immune to failure. As recent as June 3rd, 2024, Atlassian Jira suffered a global outage which, thankfully, did not result in any customer lost data. But previous incidents in Atlassian's cloud have resulted in lost services and data so we raised this to underpin the main point that no cloud vendor is immune from disasters. This is one of the reasons why Atlassian make it very clear to end customers that the backup and recovery of your Jira and Confluence data is the responsibility of the end customer. \"You need to go through that whole thing periodically and make sure everyone knows what their role is and what they're supposed to do.\" Alex Ortiz during The Jira Life \"Emergency Livestream - Jira is DOWN!\" Recommendations for Cloud Users At the bare minimum, we recommend that you should; Develop comprehensive backup and disaster recovery plans. Regularly test and update your DR protocols to ensure they are current and effective. Diversify their cloud service providers to minimize risk. Maintain clear communication channels with their cloud providers to ensure timely and accurate updates during incidents. Conclusion The UniSuper Google Cloud outage serves as a stark reminder of the vulnerabilities in even the most sophisticated digital infrastructures. It underscores the necessity for robust disaster recovery planning and the importance of diversified backup strategies. By prioritizing DR, organizations not only protect their operations and data but also preserve their reputation and client trust. As a leader in data protection and disaster recovery in Atlassian cloud, our door is always open to discuss your situation.", "url" : "https://www.revyz.io/blog/how-google-deleted-125-billion-pension-fund-account", "wordCount" : "1035" } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Stu Lees", "url" : "https://www.revyz.io/blog/author/stu-lees" }, "dateModified" : "2024-09-06T12:06:35.600Z", "datePublished" : "2024-06-12T04:12:11.000Z", "headline" : "How Google Deleted $125 Billion Pension Fund Account", "image" : [ "https://www.revyz.io/hubfs/Google%20Cloud%20Outage.png" ], "mainEntityOfPage" : { "@id" : "https://www.revyz.io/blog/how-google-deleted-125-billion-pension-fund-account", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.revyz.io/hubfs/RevyzLogo.svg" } } } ``` ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States of America", "addressLocality" : "Santa Clara", "addressRegion" : "California", "postalCode" : "95054", "streetAddress" : "3964 Rivermark Plz #1002" }, "contactPoint" : [ { "@type" : "ContactPoint", "availableLanguage" : "en", "contactType" : "customer service", "email" : "support@revyz.io" }, { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "en", "contactType" : "sales", "email" : "sales@revyz.io" } ], "description" : "Revyz offers powerful Jira cloud backup and Confluence data protection. Safeguard your Atlassian cloud with automated restore and security controls.", "logo" : "https://www.revyz.io/hubfs/Revyz%20-%20Blue%20-%20Logo.svg", "name" : "Revyz Inc", "sameAs" : [ "https://www.linkedin.com/company/revyz", "https://www.youtube.com/@revyzapp", "https://www.instagram.com/revyzsecurity/" ], "url" : "https://www.revyz.io/" } ```