One Drive has emptied all folders of content

Question

My not for profit One Drive account has had all folders emptied of content without any human intervention. Folders still visible but noone at home. There are a large number of files in the recycle bin all dated 4 March. What major system glitch has caused this to happen? Personal and business One Drive folders look to be OK.

Answer 1

Hello @Rick Bayley

Welcome to Q&A forum! 

As I understand, your issue is that the entire contents of your NFP OneDrive folders have vanished while the directory structures remain intact. This anomaly likely occurred because of a critical synchronization conflict or the inadvertent execution of automated backend protocols, which misidentified your active data as redundant and triggered a wholesale migration to the Recycle Bin.

The silver lining in this situation is that because the files remain in the Recycle Bin, they have not been permanently purged. You have a reliable safety net.

1/ Suspend Synchronization

• Before attempting to rectify the data loss, you must prevent the local client from transmitting further "deletion" commands to the cloud.
• Locate the OneDrive cloud icon in the system tray (bottom right of your taskbar).
• Right-click the icon and select Pause syncing.
• Ensure synchronization remains suspended until the cloud-based restoration is fully verified.

For your reference:

How to Pause and Resume OneDrive Sync - Microsoft Support

2/ OneDrive Restoration

• This is the most efficacious method to reverse the mass deletion event that transpired on March 4th.
• Access OneDrive for Web using your NFP credentials.
• Navigate to Settings (gear icon) and select "Restore your OneDrive".
• From the dropdown menu, choose "Custom date and time".
• Utilize the activity histogram to pinpoint the massive "Delete" event on March 4th, then adjust the slider to a timestamp immediately preceding that activity.
• Click Restore. Your directory structure will be repopulated automatically.

For your reference:

Restore your OneDrive - Microsoft Support

If you still need my assistance, please come back with screenshots or any additional details so I can review it again and see if there’s anything more I can help you with. 

Have a nice day! 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".  

Note: Please follow the steps in "our documentation" to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

For a OneDrive for Business or nonprofit tenant, a sudden mass deletion on a single date is almost always the result of:

1. A user or app action (often unintended), such as:
   • Someone with access deleting or moving a top‑level folder or site library.
   • A sync client misconfiguration (e.g., a local folder being emptied and the change syncing to the cloud).
   • A bulk operation from SharePoint/Teams (e.g., replacing or restructuring a library).
2. A retention/cleanup process or malware/ransomware scenario, where Files Restore may be needed.

There is no documented “major system glitch” that automatically empties all folders while leaving them visible. However, Microsoft 365 provides multiple recovery options for exactly this kind of event:

1. Since the files are in the OneDrive recycle bin and all dated 4 March, restore them from there:
   • Go to the OneDrive website for the nonprofit account.
   • Open Recycle bin.
   • Select the affected items (or all items) and choose Restore.
   • This will put the files back in their original locations.
   If the items are not in the first‑stage recycle bin, check the second‑stage recycle bin (via the SharePoint site backing that OneDrive) as described in the recovery guidance.
2. If many files were deleted, consider restoring the entire OneDrive to a point before 4 March:
   • On the OneDrive website, select Options > Restore your OneDrive (if supported by the organization).
   • Choose a restore point just before 4 March and apply.
   • This undoes actions on files and folders within the last 30 days.
3. If the files are not recoverable via the recycle bin or Files Restore, an admin can:
   • Check for any local synced copies on user devices.
   • If still unresolved, open a support ticket with Microsoft 365 support and provide:
     • The full URL of the affected OneDrive or library.
     • Names of several affected items.
     • The approximate date/time when the content was last in a good state.
   • Microsoft can restore from service‑level backups within a limited window (site‑collection level only).

To understand the root cause, an admin should review:

• Audit logs (if enabled) for delete/move operations on 4 March.
• Recent sync client activity on any PCs linked to that nonprofit OneDrive.
• Any automated processes, scripts, or apps with access to that OneDrive.

The immediate priority is to restore the data using recycle bin and/or Files Restore, then use audit and activity logs to identify what triggered the mass deletion.

---

References:

• Find lost or missing files in OneDrive
• How to recover missing, deleted or corrupted items in SharePoint and OneDrive for work or school