Forum Discussion

grant_jenkins's avatar
grant_jenkins
Iron Contributor
Jun 24, 2025

Potential for Data Breach - Microsoft not prepared to fix

Hi all,

I posted something here a couple of weeks ago regarding SharePoint Retention Policies including Team's Channel Sites and effectively leaving them orphaned when the Microsoft Team is deleted. Given they could contain sensitive data, it's effectively leaving your data exposed to potential data breaches.

We've logged a ticket and DCR (design change request) to Microsoft outlining the seriousness of this issue, but they have come back 4 times (over the last 1 1/2 months) saying they're not prepared to fix it as it's by design. Effectively saying they don't care about their customers data.

I've submitted a UserVoice for it, but don't think Microsoft will even look at it unless it gets a lot more votes.

Major Data Breach Possibility - SharePoint Retention Policy includes Team Channel Sites (Orphaned Channel Sites) · Community

This post (and my other one) is to ensure Microsoft customers (you) are aware of the issue, and that Microsoft aren't going to do anything to fix it. Hopefully we can put some more pressure on Microsoft to do the right thing.

No RepliesBe the first to reply

Resources