Somewhere in Colorado, 50 terabytes of St. Louis history is sitting in a data center — untouched, inaccessible, and legally frozen in place. Nobody torched the servers. No ransomware hit. A preservation order bars anyone from deleting a single file. Nine PBS still cannot reach any of it, because the company holding the keys reportedly ceased to function without warning — a scenario reminiscent of how confidential files exposed by third-party custody gaps can leave rightful owners locked out entirely.
How 50 Terabytes Goes Dark Without Burning
This isn’t a data-loss story — it’s a data-hostage story, and the culprit isn’t a server fire.
Nine PBS had worked with Open Source Storage (OSS) and its predecessor since 2019. A contract renewal was expected on March 6. OSS went silent instead — no warning, no handoff, no 30-day retrieval window it had supposedly promised after termination. When the station investigated, OSS’s website was offline. The Colorado Secretary of State listed the company as delinquent. Then came the next surprise: OSS had been storing everything inside Iron Mountain Data Centers all along.
Here’s the chain of events that followed:
- Contract renewal expected March 6; OSS went dark without notice
- 50TB archive covers 70 years of St. Louis-area programming, photos, and video
- OSS’s site went offline; company listed as delinquent with Colorado Secretary of State
- Nine PBS sent Iron Mountain a demand letter; Iron Mountain initially wouldn’t confirm it even held the data
- Iron Mountain later acknowledged possession, then reportedly backed away from returning it
According to court filings cited in reporting, Nine PBS had legal rights to access the data stored with OSS — yet practical recovery stalled because Iron Mountain asserted that OSS, not Nine PBS, owned the physical services housing the archive.
Chain-of-Custody Gaps Are the Real Risk
When ownership is split across a content owner, a cloud vendor, and a colocation operator, the data can exist and still be unreachable.
Nine PBS filed suit in Denver District Court on July 28. A judge entered a preservation order barring deletion or modification while the case proceeds. The court also ruled that Nine PBS had rights to access its data and that OSS should facilitate a transfer to a new vendor. Iron Mountain’s ownership claim over the physical services created a standoff that court rulings alone haven’t resolved. Growing regulatory scrutiny — including moves by government health, financial, and legal sectors to restrict vendor control of sensitive institutional data — underscores how widespread these custody risks have become.
This is the part that should unsettle every IT administrator reading this. Think of it like a show vanishing from every streaming platform because three companies can’t agree who owns the rights — the content exists, no one can watch it, and the dispute grinds on while the clock ticks. The archive reportedly survived intact. The legal chain of custody around it didn’t — much like the way a database leak exposes how institutional archives can be rendered effectively inaccessible when control over the underlying infrastructure is disputed.
Before your next vendor contract renewal, find the clause that defines your exit rights and what happens to your data if the vendor goes dark. The lesson here isn’t simply “back up your data.” It’s “document your escape route before you need it.”
