A DELETED SPREADSHEET, A SEASONAL ACCOUNT NOBODY SHUT OFF, A SERVER IN A BRANCH CLOSET. HERE'S WHERE CO-OP DATA ACTUALLY GOES MISSING, AND WHAT IT TAKES TO GET IT BACK.
It’s settlement week. The spreadsheet half the office works out of got saved over Tuesday night, when someone pasted the wrong tab into it and hit save without thinking. Nobody notices until Thursday, when the numbers don’t tie. By then, three people have made their own changes on top of the mistake.
The short answer: The biggest data loss risks for an ag co-op are ransomware, files that get deleted or overwritten, seasonal and departing employees, assuming Microsoft keeps everything, hardware failing at a branch location, data stored on one person’s laptop, and systems merging after a co-op merger. A backup fixes some of these. Others need different protection, like shutting off accounts on time or controlling where sensitive data can be sent.
Most co-ops have backups of some kind. The question is whether those backups cover the ways data actually goes missing. Here’s how each risk plays out, and what it takes to protect against it.
Yes, and it often goes after the backups first. Ransomware encrypts your files so you can’t open them, and many attacks look for backup systems connected to your network and encrypt those too. If your only backup sits on the same network as everything else, it can be lost in the same attack.
The defense is a copy attackers can’t reach or change: one stored offline or locked so it can’t be edited or deleted. The FBI’s guidance to agricultural cooperatives says the same thing, recommending offline copies of backups and making sure “copies of critical data are not accessible for modification or deletion from the system where the data resides.”
Usually, nothing dramatic, until someone needs the file. Deletions and overwrites are the most ordinary kind of data loss, and they happen constantly in co-ops that run on shared spreadsheets and shared folders.
If your files live in SharePoint or OneDrive, you have two ways to recover. Version history can roll a file back to an earlier save, as long as it’s turned on and someone knows where to look. The recycle bin catches deleted files, and Microsoft keeps them for 93 days from the date of deletion. After that, they’re permanently deleted.
Ninety-three days sounds like plenty. But a settlement file deleted in October, needed for an audit in March, is gone.
Mostly through accounts that stay open after people leave, and files that leave with them. Co-ops bring on extra help every season, and the offboarding is easy to let slide once harvest is over and everyone’s tired.
As seasonal staff head out this month, three things are worth checking:
The fix is a routine, not a heroic effort. Every person who leaves gets their access shut off on their last day, and their files get moved somewhere shared before the account is deleted.
Not the way most people assume. Microsoft keeps its service running and protects against problems on its end, like hardware failures in its data centers. It doesn’t keep a long-term copy of your files and email that you can restore from whenever you need it.
What Microsoft does provide is a safety net with time limits. Deleted SharePoint and OneDrive files stay in the recycle bin for 93 days. Email that someone permanently deletes is kept for 14 days by default, and that can be extended to a maximum of 30. After that, it’s gone.
That’s why a separate Microsoft 365 backup matters. It keeps copies outside those windows, so a file deleted in October can still be restored in March.
Then whatever lived on that server is only as safe as the backup sitting next to it. Many co-ops still run a server in a closet at a branch location, sometimes with a backup drive plugged into the same machine or sitting on the same shelf.
That setup protects against a file getting deleted. It doesn’t protect against a failed server, a fire, a flood, or a burst pipe, because the backup is in the same room as the thing it’s backing up. A copy that lives somewhere else, in another building or in the cloud, is what gets you through those.
Then it’s one dropped laptop, stolen truck, or failed hard drive away from gone. It’s common for the agronomist’s planning files, the grain merchandiser’s working spreadsheets, or the manager’s board notes to live on a desktop that never syncs anywhere.
Ask your team where they actually save their work. You’ll probably find a few critical files sitting in places nobody would think to back up.
Mergers put two sets of systems, two sets of habits, and years of records through a migration at the same time. Iowa has seen a steady run of co-op mergers, and the data side of the deal tends to get less attention than the board vote.
The risks show up in a few predictable places:
The fix is a migration plan that includes checking the data after it moves, and keeping the old system readable until someone signs off.
A good backup covers ransomware, deletions, hardware failures, and Microsoft’s time limits. It doesn’t stop data from leaving, close an account someone forgot about, or check that a migration moved everything. Those need their own protection.
|
Risk |
Does a backup fix it? |
What else you need |
|
Ransomware |
Yes, if a copy is offline or can’t be changed |
Monitoring to catch an attack early |
|
Deleted or overwritten files |
Yes |
Version history turned on and people who know how to use it |
|
Seasonal and departing employees |
Partly |
Accounts shut off on the last day, files moved before deletion |
|
Microsoft’s deletion limits |
Yes, with a Microsoft 365 backup |
Nothing more, as long as the backup is running |
|
Branch server failure |
Yes, if the copy is stored somewhere else |
A tested restore |
|
Files on one person’s laptop |
Only if the files get backed up |
Saving work to shared, backed-up locations |
|
Data sent where it shouldn’t go |
No |
Data loss prevention rules on email and files |
|
Co-op merger migrations |
Partly |
A migration plan with data checks before the old system shuts off |
You know which records your co-op can’t live without. Our part is making sure there’s a copy you can get back when something goes wrong. Every one of our managed IT packages includes Microsoft 365 backup and onboarding and offboarding tied to your HR system, so accounts open and close when people come and go. Our ARMOR and FORTRESS packages add data loss prevention for Microsoft 365, which flags or stops sensitive information before it leaves by email or shared files.
If you’re not sure which of these risks apply to you, an assessment will show you where your data lives and where the gaps are.
Every co-op has a file somebody would give anything to get back. Usually, it’s not the one anyone worried about. It’s the shared spreadsheet, the agronomist’s planning file, or the folder on a laptop that walked out the door with a seasonal hire. Harvest is wrapping up, which makes this a good month to find out where your important data actually lives. If you’d like a second set of eyes on it, give us a call.
The most common causes are files that get deleted or overwritten, hardware failures, ransomware, accounts left open after employees leave, and data stored in only one place, like a single laptop. For co-ops, seasonal staff turnover and system migrations after mergers add to the risk.
Not in the way most people assume. Microsoft protects its own service, but it doesn’t keep a long-term copy of your files and email for you to restore from. Deleted files and email are kept for a limited time, then permanently deleted, which is why a separate Microsoft 365 backup matters.
Deleted files in SharePoint and OneDrive stay in the recycle bin for 93 days from the date of deletion. Email permanently deleted in Exchange Online is kept for 14 days by default, and the setting can be extended to a maximum of 30 days.
Accounts that stay active after the season ends can be used by someone else, files saved only to a personal OneDrive can be lost when the account is deleted, and company data can leave by email or on a thumb drive. Shutting off access on the last day and moving files first prevents most of it.
A backup keeps copies of your data so you can restore it after it’s lost or damaged. Data loss prevention watches sensitive information as it moves and flags or blocks it before it leaves your organization, like a file with bank account numbers attached to an outside email. Most organizations need both.
Microsoft Support: “Restore items in the recycle bin that were deleted from SharePoint or Teams.” Deleted items kept for 93 days from deletion
Microsoft Learn: “Change how long permanently deleted items are kept for an Exchange Online mailbox.” 14 days by default, maximum of 30 days
FBI Private Industry Notification: “Ransomware Attacks on Agricultural Cooperatives Potentially Timed to Critical Seasons” (April 20, 2022). Backup recommendations for cooperatives