Fifty terabytes of irreplaceable St. Louis history — COVID-19 coverage, the 1993 Great Flood, East St. Louis documentation, and more than 11,000 files spanning seven decades — sat completely intact on servers in a Denver data center. Nine PBS just couldn’t touch any of it. Not because the data was gone. Because the middleman had vanished. The risk of losing access to confidential files through a third party is a growing concern across industries.
When Your Cloud Vendor Ghosts You
A vendor going dark mid-contract exposed a three-party tangle that no one anticipated — and no dashboard could fix.
Nine PBS began storing its archives with cloud vendor Open Source Storage (OSS) in 2019, renewing annually without incident through 2025. Then, in February 2026, OSS stopped responding entirely. The contract expired March 6. The agreed 30-day retrieval window was never honored — access was cut immediately. Nine PBS only then discovered that OSS had been colocating its data on physical servers inside an Iron Mountain Data Centers facility in Denver. Think of it like subletting from someone who disappears, leaving you to negotiate with a landlord who has never heard your name.
A Missouri court entered a default judgment in June 2026 confirming that Nine PBS owns the data and has the right to possess it. Iron Mountain acknowledged it held the data but continued to block direct access, citing its contractual relationship with OSS. On July 29, Denver District Court Judge Eric Elliff issued a preservation order barring Iron Mountain from deleting or modifying the archive. Then, at an August 12 hearing, Judge Elliff cleared the path for retrieval with a framework that is surgical by design:
- Nine PBS has 30 days to identify a qualified third party — potentially a former OSS employee — capable of extracting its files without touching other customers’ data
- Iron Mountain must cooperate with that third party, despite having no direct contract with Nine PBS
- Nine PBS must pay OSS’s outstanding and overdue storage fees before retrieval begins
- Any hardware temporarily removed for extraction must be returned; only the data permanently leaves
- Nine PBS must indemnify Iron Mountain against liability if other tenants’ data is affected
- Both parties must file a progress report by September 14, 2026
Iron Mountain’s position throughout has been legally coherent, if frustrating: OSS is its customer of record, not Nine PBS, and it claims no logical access to Nine PBS’s files in any case. As technical commentary via sourcefeed.dev described it, the archive was “almost certainly sitting intact on servers in a Denver data center right now… the station just can’t touch it.” Iron Mountain maintains it acted appropriately and preserved the data pending court direction.
The Backup Rule Nobody Follows Until It’s Too Late
Seventy years of local television history nearly vanished — not from a cyberattack, but from a vendor’s quiet collapse.
Nine PBS trusted one vendor with content that cannot be recreated. The industry standard — the 3-2-1 rule, meaning three copies across two media types with one fully independent offsite backup — exists precisely for this scenario. One vendor is not a backup strategy. It is a single point of catastrophic failure, however professional the invoices looked.
What this ruling signals is bigger than one station’s archive. Courts are now willing to separate data ownership from hardware ownership and compel infrastructure providers to cooperate with end-users, even absent a direct contract. Regulatory scrutiny of cloud vendor access to sensitive data is intensifying globally. If your organization stores anything irreplaceable in the cloud, that vendor’s financial health is now your operational risk. Verify it before the dashboard goes dark for good.
