Cyber Risk Analyst: 2026-09-28

1. Microsoft tells nonprofits their deleted M365 data isn't coming back

   The Register, 2026-09-28. Read, 2 min.

   Microsoft confirmed to The Register that, after nonprofits' expired Microsoft 365 Business Premium grant subscriptions were terminated, an error deleted remaining data, if any, before the retention period had ended. In an email seen by The Register, Microsoft told an affected customer the data cannot be recovered and that it is currently unable to say which data may have been deleted, or whether any was deleted at all.

   Why it matters for this role: Microsoft's early deletion of nonprofit data it can neither recover nor list belongs in your SaaS risk scenarios as a vendor error, alongside the attack cases.

Cyber Risk Analyst