Tech

What happens when your cloud storage provider disappears with your data?

Ars Technica55 min ago
Server racks inside a data center archive facility
Server racks inside a data center archive facilityPhoto: Brett Sayles / Pexels

Picture a public broadcasting station's decades-long video archive: documentaries, news footage, culturally significant programming. Now imagine 50 terabytes of that archive becoming inaccessible overnight — not because of a malicious attack, but because communication with the company hosting the data simply went silent.

That scenario is playing out for real at a US public broadcasting station right now. The station had stored a significant portion of its archive on infrastructure run by storage and cloud services giant Iron Mountain. Recently, though, communication with the company broke down entirely, leaving the station unable to access its own data.

'We don't have access to the data on the hardware/servers,' station officials said, not hiding their frustration in describing the situation. The problem isn't just a technical hiccup; it's a structural vulnerability showing just how dependent the institution had become on a third party it now has no leverage over.

The case raises a bigger question a growing number of institutions are facing: what happens if a cloud storage provider stops operating, goes dark on communication, or goes out of business? The data may technically still exist somewhere, but the keys to access it can slip out of reach.

According to experts, the root cause behind these scenarios is often simple: institutions let their data depend on a single provider, or a single copy. The industry-standard '3-2-1 backup rule' — three copies of data, on two different types of media, with one copy stored in a physically separate location — exists precisely to prevent this kind of situation.

But applying that rule can be costly, particularly for budget-constrained organizations like public institutions and nonprofit broadcasting stations. Backing up large archives across multiple providers means extra storage costs and technical complexity — which leads many organizations to accept the risk of relying on a single provider instead.

Experts also note that cloud contracts often don't adequately address this risk. Terms covering how much time customers get to retrieve their data if a provider halts service, or under what conditions access is guaranteed, are frequently vague or insufficient in these agreements.

As incidents like this become more common, digital archiving specialists offer a few concrete recommendations for institutions: keep at least one copy of data on infrastructure under the institution's direct control, demand explicit data-recovery clauses in provider contracts, and run regular access tests to confirm data can actually be retrieved.

The case also points to a broader issue of digital fragility: culturally and historically significant content is increasingly stored digitally, but the institutional and technical safeguards needed to protect it long-term don't always keep pace.

Ultimately, the episode is a reminder that the convenience of cloud storage comes with a cost: moving data from a physical shelf to a server doesn't eliminate the risk of losing it — it just makes that risk invisible.

This article is an AI-curated summary based on Ars Technica. The illustration is a stock photo by Brett Sayles from Pexels.

Read next