Windows 10 reached end of support on October 14, 2025, prompting a wave of PC refreshes; the retired Windows 10 hardware still holds data and must be disposed of securely with verifiable data destruction.
What actually happened
On October 14, 2025, Microsoft ended free support for Windows 10: no more feature updates, security updates, or standard technical assistance. Devices still boot, but they no longer receive the security patches that keep them safe. Microsoft offers a paid Extended Security Updates (ESU) program as a bridge, and has said it will continue delivering Microsoft 365 security updates on Windows 10 through October 10, 2028, but these are stopgaps, not a reason to stand still.
The refresh creates an ITAD problem, not just a procurement one
Most organizations respond by refreshing hardware to Windows 11. That means a surge of retired laptops and desktops leaving the building, each one a drive full of data. The security exposure doesn't end when the new machine arrives; it ends when the old machine's data is provably destroyed and the device is accounted for.
- Don't stockpile retired machines in a closet: that's unmanaged data risk
- Don't hand them to an untracked hauler: you lose the chain of custody
- Do require a certificate of destruction tied to each device's serial number
- Do recover value: many Windows 10–era machines still have resale worth
How American Circular is built to handle the retirement
American Circular is built to take the back half of the refresh off your plate: local Tampa Bay pickup, serial-level inventory, data destruction aligned to NIST 800-88, and value recovery on equipment that still has resale worth, all under an auditable chain of custody.
Frequently asked questions
When did Windows 10 reach end of support?
Microsoft ended support for Windows 10 on October 14, 2025. Devices keep working but no longer receive standard security updates; a paid Extended Security Updates (ESU) program is available as a bridge.
What should we do with the PCs we're retiring?
Retire them through a tracked ITAD process: serial-level inventory, NIST 800-88–aligned data destruction with a certificate per device, and value recovery where the hardware still has resale worth, all under an auditable chain of custody.