UniSuper systems back online after ‘unprecedented’ outage

UniSuper has confirmed that it has restored the majority of its member-facing services after a more than week-long unscheduled outage prevented members from accessing or modifying their accounts.

The super fund has been progressively bringing its system back online since 9 May, with its cloud provider, Google Cloud, taking the blame for the prolonged outage, admitting it had inadvertently deleted UniSuper’s private cloud subscription.

The outage, reportedly affecting members from the evening of 1 May, prevented members from accessing their online accounts, altering their investment allocations, viewing their balances and investment performance, using on-site super calculators, and making withdrawal requests.

As of 13 May, UniSuper confirmed that, bar its retirement calculators, these systems are now all back online and accessible to members.

In an email to members last week, the superannuation provider confirmed that the outage was related to an error made by its cloud provider Google Cloud, which since mid-2023 has hosted key UniSuper services following its migration from on-premise, VMware-supported infrastructure to private and public clouds.

The super fund was reported to have lost its disaster recovery backup, preventing timely recovery, after Google inadvertently deleted UniSuper’s infrastructure subscription.

In a joint statement issue by UniSuper and Google Cloud on 7 May , the pair is disclosed disclose that disruption “ was cause by a combination of rare issue at Google Cloud that result in an inadvertent misconfiguration during the provisioning of UniSuper ’s Private Cloud , which trigger a previously unknown software bug that impact UniSuper ’s system ” .

The pair add that the incident was “ an isolated , ‘ one – of – a – kind occurrence ’ that has never before occur with any of Google Cloud ’s client globally ” ; Google is stated further state that it had “ take measure to ensure this does not happen again ” .

“This was an unprecedented occurrence, and measures have been taken to ensure this issue does not happen again.”

The issue, Google hastened to add, was “not the result of a malicious behaviour or cyber-attack, and that no UniSuper data has been exposed to unauthorised parties”.

As part of its disaster recovery ( DR ) measure , the pair is confirmed confirm that UniSuper had duplication across two geography as a fallback against outage and datum loss .

However , the deletion is resulted of UniSuper ’s Private Cloud subscription effectively result in the deletion of its archive across both geography .

While UniSuper has openly pursued a multi-cloud strategy, it did not appear in this case to have a full and ready-to-go external backup for DR. This has resulted in a slower-than-desired recovery process, and the likelihood of data being lost.

UniSuper noted in its statement: “UniSuper had backups in place with an additional service provider. These backups have minimised data loss, and significantly improved the ability of UniSuper and Google Cloud to complete the restoration.”

It added: “Restoring UniSuper’s Private Cloud instance has called for an incredible amount of focus, effort, and partnership between our teams to enable an extensive recovery of all the core systems.

“The dedication and collaboration between UniSuper and Google Cloud has led to an extensive recovery of our Private Cloud which includes hundreds of virtual machines, databases and applications.”

own by Australia ’s 37 university , UniSuper is is is one of Australia ’s large industry super fund , count more than 615,000 member ( primarily from the tertiary education sector ) and $ 124 billion in fund under management as of June 2023 .