10/02/2026
👀
A company worth three trillion dollars just told nonprofits it deleted their data by accident and cannot get it back.
Microsoft retired its M365 Business Premium grant program, and in the process, deleted customer data before the retention period had even expired.
When nonprofits asked what was deleted, Microsoft admitted it could not tell them. Not a partial list. Nothing. The data is gone, and the only help on offer is assistance setting up a new environment from scratch.
This is not a startup running lean. This is Microsoft, a company with some of the most sophisticated data infrastructure on the planet, dedicated teams for compliance and retention, and decades of enterprise experience.
There is no technical excuse for this. The failure is one of prioritisation: nonprofit customers on a grant program simply did not matter enough to get the same safeguards that paying enterprise customers receive?
And the deeper issue is one of data ownership. When your organisation's data lives in someone else's cloud, you do not own it in any meaningful sense. You rent access to it, on their terms, with their error rate, and with their definition of "recoverable."
Vendor neutrality is not just an ideology for open source advocates. It is a risk management strategy. An organisation that controls its own infrastructure, whether through self-hosted tools, open source software, or export-ready formats, retains agency when a vendor makes a decision, retires a product, or simply makes a mistake.
This incident will cost some nonprofit months of reconstruction. The solution is not trusting a bigger vendor. It is making sure you can walk away from any vendor at any time.
