No one ever wants to believe that their data could suddenly vanish. Cloud storage in particular is often touted as the perfect, indestructible solution that protects your information from all possible angles. The truth is far more complicated. Cloud vendors lose data every day, and someday you could be the one scrambling to recover years’ worth of critical information.
One recent story highlights this uncomfortable possibility, and teaches important lessons about data backup and recovery.
What Happened?
If you logged into your company’s cloud storage today, and discovered the account was inaccessible, how would you react? This is precisely what happened to software engineer Abdelkader Boudih (more commonly known by the handle “Seuros”) in August 2025. His entire AWS account was wiped from existence for no apparent reason and without recourse. Attached to it was over ten years’ worth of data.
To this day, no one is entirely sure what happened to cause this. There are two main theories. The first, and most prevalent, is that the deletion occurred as the result of an issue with Seuros’ payment provider. For unknown reasons, AWS refused to switch to his backup payment method and instead decided to terminate the account.
The second theory is darker. Some software engineers claim that around this time, AWS had been testing an algorithm designed to delete unused accounts. They believe the script was accidentally run, deleting a number of user accounts in the process, including Seuros’. This is more questionable, as under these circumstances one would expect to hear other users making the same complaint. Seuros appears to have been the only person affected.
Regardless of the true cause, the end result was the same. Seuros was informed that his account, and all data attached to it, were irretrievable. AWS firmly denied any fault, and told him there was nothing they could do. This occurred in blatant disregard for their service level agreements (SLAs), which guarantee a 90-day grace period.
The Recovery
Despite AWS’ repeated claims that the data had been erased, Seuros was eventually able to regain access to his account after his story reached the news and a helpful AWS software engineer escalated his case. To his surprise, he found that no data had actually been deleted. In fact, “backups” were still being actively created four days after he had been told the data was gone.
This is a happy ending that many in Seuros’ position are not able to achieve. It’s very likely that he only regained access to his account because of how public his story was becoming. AWS certainly hadn’t been willing to work with him before that point, and had simply told him the problem could not be solved. If something similar ever happened to your business, the outcome would likely be far worse.
The Impact of Cloud Storage Errors
Seuros wasn’t a personal user. He was a professional developer who had worked with AWS in the past and was storing critical client projects and codebases within the cloud. If this can happen to him, it can happen to you too. The consequences of such an event could be dire:
- Permanent Data Loss: In the worst-case scenario, data may be completely unrecoverable. This is what almost happened to Seuros. Financial information, customer data, or even intellectual property could be permanently lost.
- Operational Disruptions: Without the data you need to operate normally, your entire business may grind to a halt. Each hour that systems remain offline could cost thousands of dollars.
- Reputational Damage: Customers trust you to handle their data with care. A major loss makes you look unprofessional and untrustworthy, damaging your reputation.
- Reduced Profitability: Ultimately, all of this results in financial damages. As operations slow down and customers start choosing your competitors instead, profits will drop.
So what can you learn from this story?
Lessons Learned About AWS Data Loss Prevention
1. The Cloud Is Not Infallible
The most important takeaway from this unfortunate incident is that cloud-based solutions are not perfect. Ultimately, you are just using someone else’s computer. These services are subject to many of the same problems that your own on-premise infrastructure is.
Key Strategy: Don’t rely on the cloud alone to protect your data. You should have a number of backups, across various on-site and cloud-based mediums, for maximum coverage.
2. Don’t Put All Your Eggs in One Basket
Seuros made one crucial mistake in this situation: he stored his “backups” in the same location as everything else. This is not a true backup, as evidenced by the fact that it did nothing to protect him. If all copies of your data exist in the same location, or rely on the same vendor, then you functionally do not have a backup.
Key Strategy: All backups must use a different vendor from your main storage provider. If all of your data is kept in one location, it is not backed up regardless of how many copies you have.
3. Vet Vendors Carefully
AWS was not initially planning to help Seuros, though they clearly had the ability to do so. Were it not for that one engineer who decided the situation was unacceptable, the data would have remained lost. This demonstrates a worrying truth: ultimately, you are reliant on your vendor. If the provider simply decides that you should no longer have access to your backups, they will vanish from underneath you.
Key Strategy: Vet vendors out carefully to ensure they are actually capable of meeting your needs. If possible, consider partnering with a backup specialist experienced with your chosen cloud solution.
4. Don’t Blindly Trust SLAs
AWS data services definitively explain that all users will have a 90-day grace period to retrieve their information. However, Seuros was not granted this. His data vanished overnight, and all efforts at retrieval were initially refused. The promises made in AWS’ SLAs didn’t seem to matter.
Key Strategy: Don’t assume that SLAs will protect you. Always have a backup plan that does not rely on this specific vendor upholding their end of the bargain.
5. Always Plan for the Worst
If there is one thing this incident demonstrates, it’s that the worst-case scenario can always happen. No matter how safe you think your data is, a security incident or random glitch could take it away at a moment’s notice.
Key Strategy: Develop an incident response and disaster recovery plan outlining how backups will be restored, and practice it regularly to ensure that everything functions as intended.
Read case studies showing what happens when backup is done well
FAQs
Can AWS Delete My Account Without Notice?
As this incident demonstrates, AWS can absolutely restrict access to your account and data with no notice. You should never operate under the assumption that any information stored there will still be accessible at a later date.
Which Factors Can Cause an AWS Data Loss Incident?
AWS updates, glitches, and security breaches can all compromise your data. This is one reason you should always save backups to a secondary location that does not rely on AWS.
What Are Some Effective AWS Data Loss Prevention (DLP) Techniques?
To prevent data loss, it’s important to follow some basic best practices. Never rely on one single provider, and implement security measures such as access controls and encryption. Partnering with a backup specialist will further reduce your risk of something going wrong.
Will AWS Restore Deleted Data?
As shown in Seuros’ example, AWS is under no obligation to restore data deleted from your accounts. Your best defense is simply not putting yourself in a position where you are reliant on them to help you.
What is AWS Data Store?
“Data store” refers to any digital repository used to hold and protect information. AWS uses this term to refer to both cloud-based and on-premise storage.
Learn How to Protect Your Data
Seuros’ story should make every business stop and think about their backup processes. The lesson here is not that AWS cannot be trusted, but that no single vendor can. The success or failure of your company should not depend on whether one cloud service provider stores your information correctly. Instead, keep as many copies as possible across many different services. This is one of the most effective data loss prevention methods you can implement.
Are you unsure about data backup best practices? Cybersecure is here to clear the fog. Discover more valuable insights, and start working towards a stronger, safer business.