The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Google did not delete UniSuper’s entire Google Cloud account. In 2023, an internal Google provisioning tool silently assigned a one-year expiration to one Google Cloud VMware Engine (GCVE) Private Cloud. When that term expired, the managed VMware environment was automatically deleted without a customer notification.
The incident, publicly explained by Google in May 2024, affected one UniSuper private cloud—not its entire Google Account, organization, projects, other Google Cloud services, or all of its backups.
As an Amazon Associate I earn from qualifying purchases.
The short version
- Early 2023: Google operators used an internal exception tool to deploy a GCVE Private Cloud for UniSuper.
- Provisioning error: One parameter was left blank. The system applied an unknown default: a fixed one-year term.
- Approximately one year later: The private cloud reached the end of that term and was automatically deleted.
- No warning: Google’s ordinary deletion notifications were not triggered because the deletion did not originate from a customer request.
- Recovery: UniSuper and Google worked for several days to rebuild and restore operations. Contemporary reporting characterized the broader disruption as about two weeks.
Google’s official explanation is available in its technical postmortem.
What Google actually deleted
The deleted asset was one Google Cloud VMware Engine Private Cloud. GCVE provides a managed VMware environment hosted in Google Cloud, allowing organizations to run virtual machines, databases, applications, networks, and security controls on VMware infrastructure without operating the underlying data center themselves.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
The affected private cloud spanned two zones and was one of UniSuper’s multiple GCVE Private Clouds. Google said the following were not affected:
- UniSuper’s Google Account
- Its Google Cloud organization, folders, and projects
- Its other GCVE Private Clouds
- Other Google Cloud services
- Same-region Cloud Storage backups
That distinction matters. The headline “Google deleted a customer account” is understandable shorthand, but technically inaccurate. The incident was a deletion of a managed cloud environment inside the customer’s broader Google Cloud estate.
How a blank field became an automatic deletion
The causal chain was:
blank internal parameter → hidden one-year term → automatic expiry → GCVE Private Cloud deletion
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsGoogle said its operators were using an internal exception tool to handle special capacity-placement requirements. One input was left blank. Instead of rejecting the incomplete request or requiring an explicit value, the system applied an unknown default fixed term of one year.
The deployment was therefore treated by the system as temporary, even though it was not visibly understood by the customer as a temporary environment. When the term expired, automated deletion occurred.
This was not an instantaneous typo that erased everything. It was a delayed lifecycle failure: an ambiguous input created a hidden expiration date, and the expiration remained unnoticed until the deletion process ran.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Why UniSuper was not warned
Google said its customer-notification safeguards applied to customer-initiated deletion requests. In this case, the deletion originated from a parameter entered by Google operators through an internal tool. Because the event was classified differently from a customer deletion request, the normal notification process did not send a warning.
That exposes a broader control-design problem. A safeguard can exist and still fail if it only covers one route to a dangerous outcome. A provider-generated lifecycle event may produce the same destructive result as a customer deletion while bypassing customer-facing warnings.
Why the outage was so serious
The private cloud contained hundreds of virtual machines, databases, applications, network configurations, and security configurations. Recovering raw data was only part of the challenge. UniSuper and Google also had to recreate a functioning production environment, reconnect dependencies, restore access, and bring applications back into service.
Google said the organizations worked around the clock “over several days” to restore the environment and full operations. UniSuper’s joint statement described an extensive recovery effort. Secondary reporting described roughly two weeks of disruption, but that should not be treated as a precise Google-confirmed recovery duration.
The practical lesson is that data durability and infrastructure recoverability are different goals. A backup may preserve files or database contents without preserving the complete network, identity, security, VMware, and application configuration needed to operate them.
Recommended Free Tools
Were UniSuper’s backups deleted?
No—not every backup copy.
UniSuper’s initial joint statement with Google said that deletion of the Private Cloud subscription affected duplication across two geographies. It also said UniSuper had backups with an additional service provider, which helped minimize data loss and speed restoration.
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Google’s later technical postmortem said that same-region backups stored in Google Cloud Storage were not affected and were instrumental in recovery.
The defensible conclusion is therefore narrower than “Google erased all of UniSuper’s backups”: the affected GCVE environment was deleted, while Google said same-region Cloud Storage backups remained available and UniSuper also had third-party backup protection.
Why geographic redundancy was not enough
UniSuper reportedly had duplicated infrastructure across two geographies, but the subscription deletion affected that duplicated private-cloud footprint. This was not necessarily a failure of storage replication. It was a failure above the data-center layer—one involving the service lifecycle and administrative control plane.
Two regions can protect against a regional outage. They may not protect against:
- Account or subscription deletion
- A provider-side control-plane error
- Compromised administrative credentials
- An automation rule that applies across regions
- Billing or entitlement failures
- A backup catalog or recovery system hosted in the same administrative boundary
Geographic redundancy remains valuable, but it is not the same as administrative or provider independence.
What Google changed
Google listed three principal remediation measures:
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
- Deprecated the triggering internal tool. The relevant portion of the process was replaced with automation controlled through the customer interface.
- Reviewed existing environments. Google scrubbed the relevant system database and manually reviewed GCVE Private Clouds for similar risks.
- Corrected the lifecycle behavior. Google fixed the system behavior that assigned deletion terms to deployments created through the affected workflow.
Google also said it continued to use safeguards such as soft delete, advance notification, and human review where appropriate. Those are Google’s postmortem statements—not a guarantee that every possible provider-side deletion risk has been eliminated.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhat cloud customers should do
1. Keep an independent recovery copy
A second region within the same provider helps with regional failures, but it may not protect against provider-wide administrative mistakes or account-level events. Maintain at least one recovery copy outside the production provider or administrative boundary when the business impact justifies it.
2. Separate the recovery control plane
Do not keep the only copies of your backup catalog, recovery credentials, encryption keys, infrastructure-as-code state, monitoring, or disaster-recovery automation inside the same account that hosts production.
3. Make lifecycle dates visible
Inventory resources with expiration dates and alert well before those dates. For destructive or lifecycle-critical fields, require explicit values rather than allowing blank inputs to trigger defaults.
4. Test full restoration
A successful backup job does not prove that you can restore a functioning service. Test recovery of:
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →- VM images and application data
- Databases and consistency points
- DNS and networking
- Firewalls and security policies
- Identity providers, secrets, and encryption keys
- VMware and application dependencies
- Licenses and recovery credentials
Measure actual recovery time and recovery-point performance against your stated objectives.
Best Value
- Plug-and-play expandability
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
5. Confirm what “soft delete” protects
Google Cloud Storage soft delete protects deleted objects in buckets for a selected retention period. At launch, the default retention was seven days, with retention adjustable up to 90 days or disabled. See Google’s soft-delete announcement.
That is not the same as protecting a GCVE Private Cloud, its managed compute environment, network configuration, identity settings, or subscription lifecycle. Object recovery can be useful, but it is not a complete disaster-recovery strategy for managed infrastructure.
6. Validate provider independence
Third-party backup software can provide a separate management layer, but only if its storage, credentials, catalog, and recovery process remain usable during a Google Cloud account or control-plane incident. Confirm support for GCVE specifically rather than assuming that generic virtual-machine backup support is sufficient.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Commercial recovery options
Organizations evaluating protection beyond Google Cloud’s native services may compare:
- Google Cloud Backup and DR for centralized backup and recovery across supported workloads.
- Veeam Backup for Google Cloud or Veeam Data Cloud for independent and multi-cloud backup management.
- Rubrik’s Google Cloud solutions for enterprise backup and cyber-recovery workflows.
- Commvault’s platform for broad hybrid and multi-cloud protection.
These products differ in workload support, immutability, recovery orchestration, operational complexity, and cost. Buyers should verify GCVE support, recovery of VMware configuration, cross-provider storage, egress charges, restore speed, and the independence of the backup management plane.
Pricing is generally usage-based or quote-based. Current regional pricing and supported-workload details should be confirmed directly with each provider rather than inferred from a generic cloud-backup price.
What this incident does—and does not—prove
It proves that provider-side lifecycle automation can create severe customer impact even when the customer did not request deletion.
It does not prove that all Google Cloud accounts are vulnerable in the same way, that multi-region replication is ineffective, or that every Google Cloud backup was at risk. Google said the event was isolated and had not occurred previously; that is a conclusion from Google’s internal review and should be understood as such.
It does show why enterprise resilience requires more than multiple zones or regions. The strongest designs combine geographic redundancy with separate administrative identities, independent backup storage, immutable or deletion-resistant copies, and tested recovery procedures.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
