[off topic] more info about pension funds deleted by Google

alexgrutza
Contributor III

Follow up information you may find interesting

tldr: misconfiguration by Google engineers deleted all data of a 130B$ pension fund using Google cloud infrastructure

https://arstechnica.com/gadgets/2024/05/google-cloud-explains-how-it-accidentally-deleted-a-customer...

--
CISSP | LinkedIn | @Phyxiis
5 REPLIES 5

icrew
Contributor II

This feedback by Miles is extremely important.

--
https://wheretofind.me/@NoSubstitute

I mentioned the story to my wife who works in Pharma, and her first comment was "did they not have a reviewer and approver? Or did both (or more) people just miss this"

I think the moral of the story is really "just because its in the cloud doesn't make it any safer, considering google also "deleted" the backups as well"

When humans are involved, things will go wrong, sometimes...

--
CISSP | LinkedIn | @Phyxiis

The systems involved did as they were told, and that one unique mistake made a year before can't happen again. Other mistakes, currently unknown, can of course still happen. Progress.

Trying to blame someone is pointless.

Thinking back to an old quote about "... may he throw the first stone".

--
https://wheretofind.me/@NoSubstitute

Not blaming any individual. Just surprised the processes in which happen on the backend outside of customers control was not QA’ed, and if it was, was clearly a mistake. That’s what change advisory boards are for haha 

--
CISSP | LinkedIn | @Phyxiis