--- title: "The UniSuper Incident: A $135 Billion Lesson in Cloud Data Backup" description: UniSuper's $135B cloud data loss highlights need for independent backups. Revyz secures Atlassian Cloud, offering vital offsite protection. image: https://www.revyz.io/hubfs/-revyz-blog-images/Eggs%20In%20One%20Basket.png --- [Skip to content](https://www.revyz.io/blog/the-unisuper-incident-a-135-billion-lesson-in-cloud-data-backup#main-content) Close - [Home](https://www.revyz.io/) - Solutions - [Data Compliance](https://www.revyz.io/solutions/data-compliance) - [Data Security](https://www.revyz.io/solutions/data-security) - [Administration](https://www.revyz.io/solutions/data-administration) - Use Cases - [Configuration Manager (Sandbox to Prod)](https://www.revyz.io/use-case/config-manager) - [Configuration Drift Analyzer](https://www.revyz.io/use-case/config-drift-analyzer) - [Configuration Docs and Dependencies](https://www.revyz.io/use-case/config-docs-dependencies) - [Xray Config Drift and Analytics](https://www.revyz.io/use-case/xray-config-drift-analytics) - [Backup & Granular Restore](https://www.revyz.io/use-case/backup-and-restore) - [Data Deletion Log](https://www.revyz.io/use-case/data-deletion-log) - [Audit Log Backup](https://www.revyz.io/use-case/audit-logs-backup) - [Third-Party App Data Backup](https://www.revyz.io/use-case/backup-third-party-app) - [Data Cloning](https://www.revyz.io/use-case/cloning) - [User License Insights](https://www.revyz.io/use-case/user-license-insights) - [Site Health & Optimization](https://www.revyz.io/use-case/site-health-optimization) - Products - Jira - [Command Center for Jira](https://www.revyz.io/products/command-center-for-jira) - [Configuration Manager](https://www.revyz.io/products/configuration-manage/jira) - [Assets Data Manager](https://www.revyz.io/products/backup/jira-assets) - Confluence - [Command Center for Confluence](https://www.revyz.io/products/command-center-for-confluence) - Bitbucket - [Command Center for Bitbucket](https://www.revyz.io/products/command-center-for-bitbucket) - [Resources](https://www.revyz.io/resources) - [Blog](https://www.revyz.io/blog) - [Resource Center](https://www.revyz.io/jira-cloud-resources) - About - [Company](https://www.revyz.io/about) - [Partners](https://www.revyz.io/partners) - New - [Command Center for Bitbucket](https://www.revyz.io/products/command-center-for-bitbucket) SEARCH [Get Started](https://marketplace.atlassian.com/vendors/1221393/revyz) [![](https://www.revyz.io/hubfs/RevyzLogo.svg)![Revyz Logo White](https://www.revyz.io/hubfs/White.svg)](https://www.revyz.io/) - [Home](https://www.revyz.io/) - Solutions NEW - Use Cases NEW - Products - [Resources](https://www.revyz.io/resources) - About - New [Get Started](https://marketplace.atlassian.com/vendors/1221393/revyz) Quick results for "{search\_term}" - [Data Compliance ➔](https://www.revyz.io/solutions/data-compliance) - [Data Security ➔](https://www.revyz.io/solutions/data-security) - [Administration ➔](https://www.revyz.io/solutions/data-administration) - [Configuration Manager (Sandbox to Prod) ➔](https://www.revyz.io/use-case/config-manager) - [Configuration Drift Analyzer ➔](https://www.revyz.io/use-case/config-drift-analyzer) - [Configuration Docs and Dependencies ➔](https://www.revyz.io/use-case/config-docs-dependencies) - [Xray Config Drift and Analytics ➔](https://www.revyz.io/use-case/xray-config-drift-analytics) - [Backup & Granular Restore ➔](https://www.revyz.io/use-case/backup-and-restore) - [Data Deletion Log ➔](https://www.revyz.io/use-case/data-deletion-log) - [Audit Log Backup ➔](https://www.revyz.io/use-case/audit-logs-backup) - [Third-Party App Data Backup ➔](https://www.revyz.io/use-case/backup-third-party-app) - [Data Cloning ➔](https://www.revyz.io/use-case/cloning) - [User License Insights ➔](https://www.revyz.io/use-case/user-license-insights) - [Site Health & Optimization ➔](https://www.revyz.io/use-case/site-health-optimization) Jira --- - [Command Center for Jira](https://www.revyz.io/products/command-center-for-jira) - [Configuration Manager](https://www.revyz.io/products/configuration-manage/jira) - [Assets Data Manager](https://www.revyz.io/products/backup/jira-assets) Confluence --- - [Command Center for Confluence](https://www.revyz.io/products/command-center-for-confluence) Bitbucket --- - [Command Center for Bitbucket](https://www.revyz.io/products/command-center-for-bitbucket) - [Resource Center](https://www.revyz.io/jira-cloud-resources) - [Blogs](https://www.revyz.io/blog) - [Company](https://www.revyz.io/about) - [Partners](https://www.revyz.io/partners) - [Command Center for Bitbucket](https://www.revyz.io/products/command-center-for-bitbucket) ![Eggs In One Basket](https://www.revyz.io/hs-fs/hubfs/-revyz-blog-images/Eggs%20In%20One%20Basket.png?width=300&name=Eggs%20In%20One%20Basket.png) [Vish Reddy](https://www.revyz.io/blog/author/vish-reddy)Jun 25, 2025, 9:01:12 PM3 min read # The UniSuper Incident: A $135 Billion Lesson in Cloud Data Backup [Previous](https://www.revyz.io/blog/jira-data-disaster-why-full-restore-wont-cut-it-and-what-will) [Next](https://www.revyz.io/blog/simplify-your-jira-environment-a-customers-guide-to-do-more-with-less) The citizens of [Australia experienced a seismic event in May 2024](https://www.investmentmagazine.com.au/2024/06/an-implausible-planning-scenario-inside-the-unisuper-member-services-outage/) when UniSuper, a major Australian superannuation fund managing $135 billion in assets for 647,000 members, suffered an accidental deletion of its entire Google Cloud account, including internal backups. Meaning 647,000 Australian citizen's retirement funds just disappeared - $135 Billion in total!. This "one-of-a-kind" incident, caused by a Google Cloud misconfiguration, resulted in a nearly two-week service outage and serves as a critical wake-up call for organizations globally. ## The "One-of-a-Kind" Near Miss Crucially, the UniSuper outage was not a cyberattack, but rather an "inadvertent misconfiguration during provisioning" within Google Cloud's system. This internal error led to the complete cancellation of UniSuper's private cloud subscription and the deletion of all business-critical data, including its geographically redundant copies within Google Cloud. This incident fundamentally challenges the perception of inherent reliability in hyperscale cloud environments and highlights the risk of "putting all your eggs in one basket," even if that basket is a major cloud provider. ## The Unsung Hero: Independent Offsite Backup What prevented this incident from becoming an irreversible catastrophe was UniSuper's foresight in maintaining "additional backups with an independent third-party provider". These external backups were the "saving grace," serving as the sole remaining copy of UniSuper's critical data when Google's internal redundancies failed. This independent, "air-gapped" backup was logically and physically isolated from the Google Cloud environment, ensuring its integrity and availability. This scenario unequivocally validated the critical importance of the 3-2-1 data backup rule, especially the "1 copy offsite" principle. The UniSuper case vividly demonstrated that "offsite" in a cloud context doesn't just mean a different physical location within the same cloud provider; it critically means a different logical control plane and, ideally, a different provider entirely. ## Key Lessons for Cloud Data Resilience: - **Embrace the 3-2-1 Rule (and Beyond):** Organizations must rigorously adopt the 3-2-1 backup rule (3 copies of data, on 2 different media types, with 1 copy offsite). For "offsite," prioritize a logically independent provider to protect against systemic failures of your primary cloud vendor. Consider evolving to a 3-2-1-1 model by adding an immutable or air-gapped offline copy for enhanced resilience. - **Prioritize Independent Backup Solutions:** Do not solely rely on a single cloud provider's internal redundancy. Invest in third-party backup solutions that operate outside your primary cloud provider's control plane to ensure true logical separation and a vital last line of defense. - **Test Your Disaster Recovery Plan:** While UniSuper had a viable backup, the recovery process was still "long, multi-day" and "complex". This emphasizes that simply having backups isn't enough; organizations must develop and regularly test comprehensive Disaster Recovery (DR) and Business Continuity Plans (BCP) to ensure rapid service restoration (Recovery Time Objective - RTO) alongside data recovery (Recovery Point Objective - RPO). - **Re-evaluate Cloud Shared Responsibility:** The UniSuper incident blurs the traditional lines of the cloud shared responsibility model. It highlights that even the "security of the cloud" can fail, necessitating customer-side safeguards *against* provider failure. The UniSuper incident serves as a stark reminder that while cloud computing offers immense benefits, it also consolidates risk. Proactive and diversified data protection strategies are no longer just best practice but a critical imperative for safeguarding digital assets and maintaining business continuity in an increasingly interconnected and cloud-dependent world. Learning from the UniSuper incident, customers utilizing Atlassian Cloud for their critical development and collaboration data should recognize the importance of independent, offsite backups. Just as UniSuper avoided catastrophe through its third-party backup, Atlassian Cloud users need to ensure their data isn't solely reliant on Atlassian's internal redundancies. [Revyz](https://www.revyz.io/) offers a robust solution for Atlassian Cloud data backup, providing that essential independent copy. With [Revyz](https://www.revyz.io/) , customers can establish an "air-gapped" backup of their Atlassian Cloud data, ensuring protection against accidental deletion, misconfigurations, or even a systemic issue within Atlassian's environment, thereby mitigating risks similar to those experienced by UniSuper. ![avatar](https://www.revyz.io/hs-fs/hubfs/Vish-LinkedIn.png?width=290&name=Vish-LinkedIn.png) [Vish Reddy](https://www.revyz.io/blog/author/vish-reddy)**Vish Reddy** cofounded Revyz and has more than 20 years of experience in data protection, backup, cybersecurity, and enterprise software. Previously holding leadership roles at Symantec and Druva, he now leads Revyz’s growth and product strategy while actively contributing to the technology community through speaking engagements and leadership within the Atlassian Community Events San Francisco. [mailto:vish@spin.ai](mailto:vish@spin.ai) ## RELATED ARTICLES [View More](https://www.revyz.io/blog) [![Revyz Logo White](https://21176307.fs1.hubspotusercontent-na2.net/hubfs/21176307/Revyz%20Logo%20White.svg)](https://www.revyz.io/) Use Cases - [Configuration Manager (Sandbox to Prod)](https://www.revyz.io/use-case/config-manager) - [Configuration Drift Analyzer](https://www.revyz.io/use-case/config-drift-analyzer) - [Configuration Docs and Dependencies](https://www.revyz.io/use-case/config-docs-dependencies) - [Xray Config Drift and Analytics](https://www.revyz.io/use-case/xray-config-drift-analytics) - [Backup & Granular Restore](https://www.revyz.io/use-case/backup-and-restore) - [Data Deletion Log](https://www.revyz.io/use-case/data-deletion-log) - [Audit Logs Backup](https://www.revyz.io/use-case/audit-logs-backup) - [Third-Party App Data Backup](https://www.revyz.io/use-case/backup-third-party-app) - [Data Cloning](https://www.revyz.io/use-case/cloning) - [User License Insights](https://www.revyz.io/use-case/user-license-insights) - [Site Health & Optimization](https://www.revyz.io/use-case/site-health-optimization) Solutions - [Data Compliance](https://www.revyz.io/solutions/data-compliance) - [Data Security](https://www.revyz.io/solutions/data-security) - [Data Administration](https://www.revyz.io/solutions/data-administration) Product - [Command Center for Jira](https://marketplace.atlassian.com/apps/1228694/) - [Configuration Manager for Jira](https://marketplace.atlassian.com/apps/1231935/) - [Assets Data Manager for Jira](https://marketplace.atlassian.com/apps/1232736/) - [Command Center for Confluence](https://marketplace.atlassian.com/apps/1233056/) [![badge-mpac-light-filled](https://21176307.fs1.hubspotusercontent-na1.net/hubfs/21176307/badge-mpac-light-filled.svg)](https://marketplace.atlassian.com/vendors/1221393/revyz) Support & Learn - [Trust Center](https://trust.revyz.io/) - [Support Center](https://support.revyz.io/) - [Deployment Options](https://support.revyz.io/legal-security/storage-deployment-model) - [Contact](mailto:sales@revyz.io) ![Atlassian-Partner-Designation-Badge\_Platinum-Marketplace-Partner\_light-inverse\_RGB](https://21176307.fs1.hubspotusercontent-na2.net/hubfs/21176307/Atlassian-Partner-Designation-Badge_Platinum-Marketplace-Partner_light-inverse_RGB.svg) Resources - eBooks - [Blogs](https://www.revyz.io/blog) - [YouTube](https://www.youtube.com/c/SpinTechnology) - Sign-up for our blog ![Marketplace-Badges](https://21176307.fs1.hubspotusercontent-na1.net/hubfs/21176307/2025-Icons/Marketplace-Badges.svg) © 2026 Revyz. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "abstract" : "UniSuper's $135B cloud data loss highlights need for independent backups. Revyz secures Atlassian Cloud, offering vital offsite protection.", "author" : { "@type" : "Person", "name" : "Vish Reddy" }, "dateModified" : "June 27, 2025 3 PM", "datePublished" : "June 26, 2025 1 AM", "headline" : "The UniSuper Incident: A $135 Billion Lesson in Cloud Data Backup", "image" : "https://21176307.fs1.hubspotusercontent-na1.net/hubfs/21176307/-revyz-blog-images/Eggs%20In%20One%20Basket.png", "inLanguage" : "en", "keywords" : "[Data Protection, Configuration Manager, Data manager]", "mainEntityOfPage" : { "@type" : "WebPage" }, "name" : "The UniSuper Incident: A $135 Billion Lesson in Cloud Data Backup", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://21176307.fs1.hubspotusercontent-na2.net/hubfs/21176307/RevyzLogo.svg" }, "name" : "Revyz Inc" }, "text" : "The citizens of Australia experienced a seismic event in May 2024 when UniSuper, a major Australian superannuation fund managing $135 billion in assets for 647,000 members, suffered an accidental deletion of its entire Google Cloud account, including internal backups. Meaning 647,000 Australian citizen's retirement funds just disappeared - $135 Billion in total!. This \"one-of-a-kind\" incident, caused by a Google Cloud misconfiguration, resulted in a nearly two-week service outage and serves as a critical wake-up call for organizations globally. The \"One-of-a-Kind\" Near Miss Crucially, the UniSuper outage was not a cyberattack, but rather an \"inadvertent misconfiguration during provisioning\" within Google Cloud's system. This internal error led to the complete cancellation of UniSuper's private cloud subscription and the deletion of all business-critical data, including its geographically redundant copies within Google Cloud. This incident fundamentally challenges the perception of inherent reliability in hyperscale cloud environments and highlights the risk of \"putting all your eggs in one basket,\" even if that basket is a major cloud provider. The Unsung Hero: Independent Offsite Backup What prevented this incident from becoming an irreversible catastrophe was UniSuper's foresight in maintaining \"additional backups with an independent third-party provider\". These external backups were the \"saving grace,\" serving as the sole remaining copy of UniSuper's critical data when Google's internal redundancies failed. This independent, \"air-gapped\" backup was logically and physically isolated from the Google Cloud environment, ensuring its integrity and availability. This scenario unequivocally validated the critical importance of the 3-2-1 data backup rule, especially the \"1 copy offsite\" principle. The UniSuper case vividly demonstrated that \"offsite\" in a cloud context doesn't just mean a different physical location within the same cloud provider; it critically means a different logical control plane and, ideally, a different provider entirely. Key Lessons for Cloud Data Resilience: Embrace the 3-2-1 Rule (and Beyond): Organizations must rigorously adopt the 3-2-1 backup rule (3 copies of data, on 2 different media types, with 1 copy offsite). For \"offsite,\" prioritize a logically independent provider to protect against systemic failures of your primary cloud vendor. Consider evolving to a 3-2-1-1 model by adding an immutable or air-gapped offline copy for enhanced resilience. Prioritize Independent Backup Solutions: Do not solely rely on a single cloud provider's internal redundancy. Invest in third-party backup solutions that operate outside your primary cloud provider's control plane to ensure true logical separation and a vital last line of defense. Test Your Disaster Recovery Plan: While UniSuper had a viable backup, the recovery process was still \"long, multi-day\" and \"complex\". This emphasizes that simply having backups isn't enough; organizations must develop and regularly test comprehensive Disaster Recovery (DR) and Business Continuity Plans (BCP) to ensure rapid service restoration (Recovery Time Objective - RTO) alongside data recovery (Recovery Point Objective - RPO). Re-evaluate Cloud Shared Responsibility: The UniSuper incident blurs the traditional lines of the cloud shared responsibility model. It highlights that even the \"security of the cloud\" can fail, necessitating customer-side safeguards against provider failure. The UniSuper incident serves as a stark reminder that while cloud computing offers immense benefits, it also consolidates risk. Proactive and diversified data protection strategies are no longer just best practice but a critical imperative for safeguarding digital assets and maintaining business continuity in an increasingly interconnected and cloud-dependent world. Learning from the UniSuper incident, customers utilizing Atlassian Cloud for their critical development and collaboration data should recognize the importance of independent, offsite backups. Just as UniSuper avoided catastrophe through its third-party backup, Atlassian Cloud users need to ensure their data isn't solely reliant on Atlassian's internal redundancies. Revyz offers a robust solution for Atlassian Cloud data backup, providing that essential independent copy. With Revyz , customers can establish an \"air-gapped\" backup of their Atlassian Cloud data, ensuring protection against accidental deletion, misconfigurations, or even a systemic issue within Atlassian's environment, thereby mitigating risks similar to those experienced by UniSuper.", "url" : "https://www.revyz.io/blog/the-unisuper-incident-a-135-billion-lesson-in-cloud-data-backup", "wordCount" : "924" } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Vish Reddy", "url" : "https://www.revyz.io/blog/author/vish-reddy" }, "dateModified" : "2025-06-27T15:59:00.213Z", "datePublished" : "2025-06-26T01:01:12.000Z", "headline" : "The UniSuper Incident: A $135 Billion Lesson in Cloud Data Backup", "image" : [ "https://www.revyz.io/hubfs/-revyz-blog-images/Eggs%20In%20One%20Basket.png" ], "mainEntityOfPage" : { "@id" : "https://www.revyz.io/blog/the-unisuper-incident-a-135-billion-lesson-in-cloud-data-backup", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.revyz.io/hubfs/RevyzLogo.svg" } } } ``` ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States of America", "addressLocality" : "Santa Clara", "addressRegion" : "California", "postalCode" : "95054", "streetAddress" : "3964 Rivermark Plz #1002" }, "contactPoint" : [ { "@type" : "ContactPoint", "availableLanguage" : "en", "contactType" : "customer service", "email" : "support@revyz.io" }, { "@type" : "ContactPoint", "areaServed" : "US", "availableLanguage" : "en", "contactType" : "sales", "email" : "sales@revyz.io" } ], "description" : "Revyz offers powerful Jira cloud backup and Confluence data protection. Safeguard your Atlassian cloud with automated restore and security controls.", "logo" : "https://www.revyz.io/hubfs/Revyz%20-%20Blue%20-%20Logo.svg", "name" : "Revyz Inc", "sameAs" : [ "https://www.linkedin.com/company/revyz", "https://www.youtube.com/@revyzapp", "https://www.instagram.com/revyzsecurity/" ], "url" : "https://www.revyz.io/" } ```