Google Cloud Data Deletion Incident at UniSuper: Causes, Impact, and Lessons Learned

Recently, Google Cloud suffered a major incident where a customer's data was mistakenly deleted, and the backups were also removed, causing a severe outage.

The affected client was UniSuper, an Australian pension fund managing assets of about $125 billion for 600,000 members, ranking seventh in the country.

The failure occurred on May 2 local time, when many members could not access the service. Initial assumptions pointed to a simple server crash, but the problem persisted for days, and full service was only restored around May 9.

According to Google Cloud’s announcements, the root cause was a mis‑operation during the delivery of UniSuper’s private‑cloud service, leading to an erroneous configuration that deleted user data. Although UniSuper had backups in two regions, the deletion command also removed those backups, extending the recovery time.

Google Cloud CEO Peter Chun described the event as an extremely rare incident that had never happened to any of their customers worldwide.

The outage affected over 600,000 members, whose accounts were deleted and who could not access business services for more than a week, with some data still showing outdated values after restoration.

This incident serves as a warning that even leading cloud providers can experience catastrophic failures, emphasizing the need to avoid putting all eggs in one basket, adopt hybrid or multi‑cloud strategies, and maintain robust, off‑site backup solutions.

Hybrid cloud, combining on‑premises infrastructure with public cloud services, is likely to become the norm, as technologies like Kubernetes narrow the gap between private and public clouds, offering better scalability and fault tolerance.

Enterprises of all sizes should prioritize data backup as a critical safeguard, establishing comprehensive backup and recovery plans to protect against potential disasters.