Carbonite CEO Dave Friend e-mailed us with additional information about the company's recent lawsuit against a vendor, in which the company disclosed that it had lost data belonging to 7,500 customers. Friend didn't deny that the lawsuit states that Carbonite "lost the backups of over 7,500 customers, but says number of customers who actually lost data - rather than having a snapshot of their data disappear - was much smaller. In the interest of thoroughness, here is Friend's account of the incident:
The data loss event discussed in the lawsuit happened over a year ago. We do not say this to minimize the matter, but it's important for your readers to know that we stopped buying the servers that caused the problem a long time ago. This is
not a current problem.
The total number of Carbonite customers who were unable to retrieve their data was 54, not 7,500. Here is what happened: The Promise servers that we were purchasing in 2006 and 2007 use RAID technology to spread data redundantly across 15 disk drives so that if any one disk drive fails, you don't lose any data. The RAID software that makes all this work is embedded as "firmware" in the storage servers. In this case, we believe that the firmware on the servers had bugs that caused the servers to crash. Carbonite automatically restarted all 7,500 backups and more than 99% of these were
completely restored without incident.
Statistically, about 2 out of every 1,000 consumer hard drives will crash every week, so 54 of these customers had their PCs crash before their re-started backups were complete. Since they weren't completely backed up when their PCs crashed, these customers were unable to restore all of their files from Carbonite. Most of the 54 got some or most of their data back. We took full responsibility for what happened and I did my best to call each of these customers personally to apologize.
As a result of our problems with the Promise servers, a couple of years ago we switched to a popular Dell server that uses RAID6 - an improved RAID that allows for the loss of 3 of the 15 drives simultaneously before you lose any data. This configuration is in theory 36 million times more reliable than a single disk drive - the chances of 3 out of 15 drives failing at the same time are almost nil.
So far, Promise has refused to accept responsibility for their equipment's failures, so now we are suing them to get our money back. The Dell RAID servers have been flawless and we're extremely happy with them.
An executive at Promise told the Boston Globe that Carbonite's allegations were not accurate. "We stand by our product," said Chi Chen Wu, senior vice president of Promise. "We looked into the claims and found there was no merit to the allegations." Wu said the company was continuing to investigate the matter.
It seems to me that Carbonite wants to have it both ways. In its lawsuit, it invokes the loss of 7,500 customer backups and says the problem caused it "substantial damage." When the event makes headlines, Carbonite insists that few customers suffered data loss. Which brings me back to my original point: that Carbonite's disclosure was problematic for a firm in its line of business.
