News for hackers. Stuff that matters.

A comment on UniSuper members go a week with no account access after Google Cloud misconfig. Parent comment

Re:UniSuper members go a week with no account access after G... by tiew9Vii on Thursday May 09, 2024 @07:58AM (#40307273)
Yes, surprised this hasn't hit the top of Hacker News and instead gone un-noticed. If Google did delete the account, this is massive.

Large financial pension fund with advertised $124 billion in funds under management so not some toy cat gif startup has account deleted accidentally by Google. That can very easily wipe out a company using cloud as cloud vendors advertise you to. From the article it sounds like they are lucky they had offsite backups but still potential for data loss and restoring offsite backups likely a task in itself.

It's a major incident, I feel for the ops team who'll be working under massive pressure trying to get everything back up.

[ Parent | on HN ]
Re:UniSuper members go a week with no account access after G... by dualscyther on Thursday May 09, 2024 @09:54AM (#40308271)
Indeed. My gut feeling is that most companies using AWS, Azure or Google Cloud are not going to be making backups elsewhere. I wonder how much data would've been lost if they didn't have backups elsewhere?
[ Parent | on HN ]
Re:UniSuper members go a week with no account access after G... by abrookewood on Thursday May 09, 2024 @09:32PM (#40314705)
I would imagine all of it. The underlying data is going to be on encrypted volumes and I'd expect deleting them would render the data non-recoverable.
[ Parent | on HN ]
Re:UniSuper members go a week with no account access after G... by octodog on Saturday May 11, 2024 @04:59AM (#40326946)
Interestingly the Australian financial services regulator (APRA) has a requirement that companies have a multi-cloud plan for each of their applications. For example, a 'company critical' application needs to be capable of migrating to a secondary cloud service within 4 weeks.

I'm not sure how common this regulation would be across industries in Australia or whether it's something that is common in other countries as well.

[ Parent | on HN ]
Re:UniSuper members go a week with no account access after G... by toomuchtodo on Saturday May 11, 2024 @09:57PM (#40331869)
US federal financial regulators and NYDFS have similar concerns and strong opinions, but nothing in statute or regulatory rule making yet (to my knowledge; I haven’t had to sit in those meetings for about 2 years).
[ Parent | on HN ]
Re:UniSuper members go a week with no account access after G... by sumedh on Sunday May 12, 2024 @06:35AM (#40333388)
> surprised this hasn't hit the top of Hacker News and instead gone un-noticed.

Most people outside Aus dont know about UniSuper so HN probably assumed its a small company so not really important.

[ Parent | on HN ]