Windows 10 deadline passed. Here’s what businesses need to do now

Windows 10 support ended on 14 October. Businesses still using these devices face serious security risks, especially for HR and payroll systems. Here’s what you need to know about compliance and insurance implications.

Windows 10 reached end of support on 14 October 2025. Microsoft will no longer provide free security updates, patches, or technical assistance for Windows 10 devices such as laptops.

While such devices may still work, they’ll no longer be maintained or protected by Microsoft, which introduces a very real security and compliance risk for any business still using them.

For many organisations, particularly those with HR and payroll platforms running on older machines, this deadline creates a serious exposure. These devices might not be front of mind, but they are often still connected to core systems or data, and they could be vulnerable.

Security and compliance are the key risks

The first thing to consider is security, but also compliance. Now that Windows 10 is no longer receiving updates, there will not be any new free security patches made available by Microsoft. This means any vulnerabilities discovered after 14 October 2025 will remain unpatched. Today, cybercrime is at an all-time high and having your business device exposed from that perspective is quite high risk. 

From a compliance point of view, businesses may also need to check their cyber insurance policies (if any). If a business device is running unsupported software, that may fall outside the scope of the policy. If your business suffers an incident after 14 October and is still relying on Windows 10 devices, your insurance claim could be questioned or declined, depending on your policy wording. Similarly, for any organisation handling personal information, such as employee records, financial details or health data, operating unsupported systems could go against being seen to be taking reasonable security measures under the applicable local privacy legislation.

Devices will become targets

A lot of people might reasonably ask, why would I be a target? Why would someone go after my business? There are millions of people out there. But this is less about being specifically targeted, and more about visibility.

With Windows 10 now past end of support, bad actors know those devices are out there, and they know they’re no longer being patched. This lack of patching means unsupported devices may quickly become a weak point in the network.  If a vulnerability is discovered and someone knows you or your business is running on Windows 10, you or your business could be on a list without even knowing it. That is the nature of today’s cyber landscape.

There is a common assumption among some business owners that they are unlikely to be targeted because their organisation is too small or not high profile. However, this thinking may overlook how most cyber attacks now occur. Modern cybercrime is often opportunistic and automated. Attackers use tools that scan for outdated systems, and with Windows 10 now unsupported, any unpatched device could become a visible and vulnerable target.

The risk to HR and payroll systems

Functions like HR and payroll are especially exposed in this scenario, as they often rely on a mix of newer and legacy systems that may not always be prioritised in broader IT upgrade cycles. It is not uncommon to find a payroll laptop being used remotely, or an old office desktop still connected to an HR platform or printing system, running in the background.

While these devices may be low-profile in day-to-day operations, they are often linked to sensitive data, and if they remain on Windows 10 they can quickly become the target of a breach, which may potentially lead to system  failure. That is, if those machines are used to access onboarding portals, pay run systems or employee data files, the risk extends across your operational environment.

Upgrade, replace or extend?

The good news is that not every Windows 10 machine needs to be replaced. Many can be upgraded to Windows 11, provided they meet the minimum hardware requirements. Microsoft offers a free tool, the PC Health Check app, which will assess whether a device can be upgraded and also provide recommendations on how to optimise its performance. 

When I upgraded recently, I backed up my files as a precaution, but the process was smooth and did not require reinstallation or any disruption to my work. For many users, the update installs in the background and simply prompts a restart once ready.

However, there will be devices that cannot support Windows 11 due to age or specification limits. In those cases, businesses face a decision. One option is to purchase extended security support from Microsoft or a third-party provider, such as Trend Micro. These services can provide protection for a limited time, but they come at a cost and should be viewed as a short-term measure rather than a strategic solution. Every dollar spent on extended support is a dollar not invested in more capable, modern hardware that may offer greater value in the long run.

For businesses choosing to replace devices, the range of available options is wider than ever. There has been strong growth in demand for AI-ready PCs, and although the term can seem like marketing hype, these machines may offer real benefits even for users who are not running AI applications. 

The business case for upgrading

Modern devices running Windows 11 offer a number of practical benefits beyond security. One of the big developments in the market is the rise of AI-ready devices. A lot of people hear the term and assume these are only for data scientists or developers, but that is not the case.

AI-ready hardware is designed to run more efficiently. The way they manage battery life, video conferencing and processing power gives the everyday user a better experience. They are cooler, quieter and more energy efficient. For mobile workers or people on video calls all day, the improvement is noticeable. You do not need to be doing AI work to get value from these machines.

There could also be better integration between hardware and software, which may help extend device life and reduce the frequency of support calls or downtime. That matters for teams that rely on consistent access to systems, especially when working remotely or across multiple locations.

Don’t forget recycling

When planning device upgrades or replacements, it is important not to overlook the question of sustainability. Many organisations end up storing outdated devices in back rooms or sending them to landfill. However, a growing number of technology providers now offer responsible recycling or buy-back programs, which may help businesses retire their devices in a sustainable and compliant way while also helping to offset the cost of modernisation.

The end of Windows 10 support is not just a technical deadline. It is a security milestone that puts real pressure on businesses to modernise and reduce risk. Businesses can begin by auditing all devices currently used to access sensitive systems. This includes laptops used for payroll processing, desktops that connect to HR platforms and any legacy endpoints used offsite or in satellite locations. Run the PC Health Check app across the fleet and determine which devices can be upgraded and which will need to be replaced.

For any business leader, especially those responsible for people/HR, payroll or compliance, now is the time to take stock. Understand where your exposure is. Develop a transition plan. Look at your devices as part of a broader strategy, not just for security but for productivity, support and sustainability.

Keep up to date with our stories on LinkedIn, Twitter, Facebook and Instagram.