Blob Storage: Recovering Data After Accidental Deletion in East US Region

Hello HamzaMsiah-1096,

Thank you for sharing the information regarding the missing data from the two Azure Blob Storage containers.

Before we escalate this request to the Azure Storage Product Group, please complete the following validations and share the results with us:

1. Data protection configuration

• Confirm whether Blob soft delete was enabled before the deletion occurred.
• Share the configured soft-delete retention period.
• In the affected containers, enable “Show deleted blobs” and confirm whether any deleted blobs are visible.
• Confirm whether container soft delete, blob versioning, change feed, and point-in-time restore were enabled at the time of deletion.
• If point-in-time restore was enabled, confirm whether the requested May 14–26, 2026 recovery period is within the available restore window.

1. Azure Backup

• Confirm whether Azure Backup for Blobs was configured before the deletion.
• Check whether any operational or vaulted recovery point is available for the requested period.

1. Lifecycle management policy

• Export and share the complete lifecycle-management policy JSON.
• Confirm when the policy was created or last modified.
• Verify whether the affected container names or blob prefixes match the rule filters.
• Confirm whether the rule deletes base blobs, previous versions, or snapshots after seven days.

1. Storage account configuration

• Storage account name, resource group, subscription ID, and region.
• Storage account type and replication configuration.
• Confirm whether Hierarchical Namespace is enabled.
• Provide the names of both affected containers.

1. Deleted data samples
2. Please provide at least five sample deleted blob paths, including:

• Container name
• Complete blob path/name
• Approximate size
• Blob type and access tier, if known
• Last date the blob was known to be available
• Estimated deletion date and time in UTC

1. Deletion evidence
2. Please check and share any available evidence for May 14–26, 2026 from:

• Storage diagnostic/resource logs
• Log Analytics
• Storage change feed
• Application or automation logs
• Azure Functions, Logic Apps, Data Factory, Databricks, AzCopy, scripts, or other services accessing the containers

Also confirm whether the blobs disappeared at approximately the same time or gradually over several days. This will help us determine whether the deletion is consistent with lifecycle processing or an explicit delete operation.

Please share screenshots of the Data protection page, the affected containers with “Show deleted blobs” enabled, the lifecycle-management rule, and any available backup recovery points.

Once these checks are completed, we can proceed with the escalation using the collected evidence and request confirmation of any remaining supported recovery options.