The Register broke the story on September 28, and TechRadar followed it on October 1. The rest of this piece covers what Microsoft has actually said, what it hasn't, how the subscription lifecycle normally works, and what nonprofit IT admins should check now.
What Microsoft has admitted
The incident follows the retirement of the nonprofit Microsoft 365 Business Premium grant, which gave eligible nonprofits ten free licenses for the productivity suite. According to The Register, Microsoft announced in May 2025 that the grant would not renew after July 1 that year. It offered eligible nonprofits up to 300 free Microsoft 365 Business Basic licenses, alongside discounted pricing for plans including Business Premium.
Microsoft's advice at the time was reasonable. It urged customers to move users onto another nonprofit plan before cancellation to avoid disruption or data loss. Organizations could also export anything they did not intend to retain in Microsoft 365.
The trouble started after the subscriptions were deactivated. In an email to one affected customer seen by The Register, Microsoft admitted that, "due to an error," it had deleted remaining data before the retention and export window closed. Attempts to recover it had failed. The email was blunt: "We have now investigated the recovery options, but unfortunately, the data cannot be recovered," Microsoft said.
Microsoft also can't say what was lost. It told the customer it was "currently unable to provide a list showing which data may have been deleted or whether any data was deleted at all." It could say only that the problem involved expired Business Premium subscriptions.
A Microsoft spokesperson confirmed the incident to The Register: "After the applicable notice periods concluded and subscriptions were terminated, an error resulted in remaining data, if any, being deleted before the retention period had ended."
What Microsoft has not disclosed:
- How many nonprofits were affected
- How early the deletions happened
- What caused the error
Plain English Technology summed up the gaps: Microsoft hasn't said how many nonprofits were affected, how early the data was deleted, or what caused the error.
Summary: The deletion is confirmed and permanent, the cause is undisclosed, and Microsoft cannot tell any individual organization whether it lost data.
Some of the coverage goes too far
TechRadar's write-up says that all organizations with an expired Business Premium subscription are affected. Microsoft's own statements don't support that. The spokesperson's wording, "remaining data, if any", and the admission that Microsoft can't confirm "whether any data was deleted at all" point to an incident of unknown size. They don't show that every former grant customer lost files.
Many nonprofits did what Microsoft asked: they moved users to Business Basic or a discounted paid plan before the old grant was cancelled. Their mailboxes and OneDrive content should have come along with those reassigned licenses. The organizations most exposed are the ones that still had users, mailboxes or content attached to the Business Premium grant when it expired.
TechRadar also suggested Google Workspace or Zoho Workplace might now be "stronger options." That's an opinion, and the evidence doesn't decide it either way. Changing vendors doesn't fix the underlying problem, which is relying on a provider's retention window instead of keeping your own backup. That applies on any platform.
Summary: The incident is real but its size is unknown. Read claims that it hit every former grant customer with caution.
How it's supposed to work
This is where the failure stands out. Microsoft's documentation, "What happens to my data and access when my Microsoft 365 for business subscription ends?" (last updated June 8, 2026), describes a staged process meant to prevent exactly this kind of loss:
| Status | Typical duration (most offers, most regions) | Who can reach data |
|---|---|---|
| Active | Default | Everyone |
| Expired | 30 days | Everyone; admins can reactivate |
| Disabled | 90 days | Admins only (can back up data) |
| Deleted | Terminal | No one; customer data is deleted |
Microsoft notes several exceptions:
- Timings vary by agreement, channel, offer, program and region.
- CSP-purchased subscriptions follow separate Partner Center lifecycle rules.
- Since February 9, 2026, the Expired state no longer applies to license-based subscriptions bought directly through a Microsoft Customer Agreement.
- If an admin explicitly deletes a subscription, it skips Expired and Disabled, and SharePoint Online content, including OneDrive, is deleted immediately.
There's one more line every admin should remember. The same page says that once a subscription is deleted, buying a new subscription of the same type does not bring back the old subscription's data. Signing up for Business Premium again won't restore anything.
The Disabled stage exists so admins have a period to back up data. The confirmed error removed data before that period ended. The public sources don't say which exact schedule applied to each affected tenant, so be wary of anyone who gives a precise number of days.
Summary: Microsoft's lifecycle normally gives admins a buffer of several months before deletion. The error removed that buffer for some tenants.
How the transition was supposed to go
For admins who still have legacy nonprofit licenses to clean up, Microsoft's nonprofit updates page sets out the sequence for Business Premium grant holders. Do the steps in this order:
- Get the replacement. In the Microsoft 365 admin center, select the Business Basic grant or another Microsoft 365 nonprofit offer.
- Confirm the licenses are in your tenant before going further.
- Replace user licenses. Select every user with a Business Premium license and replace it with Business Basic or the other nonprofit offer you chose.
- Cancel the old subscription last, only after every user has moved.
Microsoft says these transitions are done manually, and it recommends working with a Microsoft partner if you have one. Order matters: canceling before reassigning licenses is the easy way to end up with orphaned users and data.
Some features may not carry over. Business Basic is a lower tier than Business Premium, so check which management and security tools your organization relied on before downgrading. Microsoft's nonprofit discounts on paid plans are an alternative if you need to keep them.
Not the first warning
Earlier reports suggested trouble before the Register story. The Climate+Tech Think-Tank, citing Slate, said that Slate reported on 18 August 2026 that several small nonprofits found their Microsoft-hosted data inaccessible or permanently deleted after the grant transition. The publicly available evidence doesn't confirm whether those cases come from the same error Microsoft has now admitted, so treat them as related context rather than proof.
The people hit hardest are the ones least able to protect themselves. A commenter on The Register's forums noted that the size of not-for-profits for which 10 free 365 business premium licences were welcome, would be the smaller organisations without a full time IT expert. A ten-seat grant usually means a volunteer admin and no backup budget, and that's who has lost data.
What Microsoft is offering
Microsoft apologized and offered a setup service, but the service does not recover what was lost. The "concierge service" is a free meeting with a Microsoft specialist to help set up a new Microsoft 365 environment and answer questions. Plain English Technology put it well: That helps going forward, but it doesn't bring anything back.
A checklist for nonprofit admins
If your organization ever used the Business Premium grant:
- Confirm your history. Find out when the grant expired for your tenant. Expiry was tied to each organization's renewal date on or after July 1, 2025, so there was no single cutoff. Notices quoted in the press give different expiry dates, such as April 1, 2026, because customers renewed on different schedules.
- Check what's still there. Look at user licenses, mailboxes, OneDrive and SharePoint sites for anything missing. Pay particular attention to accounts that might have stayed on the old license.
- Save the paperwork. Keep every Microsoft notice and any message from your partner. If you're affected, you'll need the timeline.
- Contact Microsoft support or your licensing partner if you think you're affected. Expect help getting set up again, not your data back.
- Set up a backup you control. Microsoft's own lifecycle documentation tells customers to back up data before it's deleted. Plain English Technology recommends that this week you check your licenses, set up a separate Microsoft 365 backup, and test a restore. A backup you have never restored from isn't proven to work.
- Look for other expiring grants. The Office 365 E1 grant was retired on the same schedule. Microsoft's guidance for it follows the same pattern: move users to a new license first, cancel the old subscription last.
The bigger picture
For years Microsoft has described cloud data protection as a shared responsibility. Microsoft runs the service, and customers are responsible for their own data. Retention windows were supposed to cover the gap between those two jobs. Here, an error inside Microsoft closed that window early, and Microsoft can't even produce an inventory of what was lost. It's fair to ask how an operation of Microsoft's size can't produce that list.
The episode also shows how licensing changes carry operational risk. When a free offer is retired, the work of moving users falls on the customer. In the affected cases, Microsoft's own safety margin failed as well. For small charities, this kind of mistake can wipe out donor records, grant paperwork and years of email.
The lesson applies to more than nonprofits: a provider's retention policy is not a backup. Microsoft has said these files are gone for good, so organizations need a copy they control before the next licensing change.
References
- Microsoft deletes nonprofit customers' M365 data — and says it can't get it back TechRadar · 2026-10-01T20:20:00+00:00
- Microsoft Deleted Nonprofit M365 Data Early and Says It Cannot Be Recovered currently.att.yahoo.com
- What happens to my data and access when my Microsoft 365 for business subscription ends? | Microsoft Learn learn.microsoft.com