The deadline for Windows 10 has passed. This is what companies need to do now

Support for Windows 10 ended on October 14. Companies that still use these devices face serious security risks, especially for HR and payroll systems. Here’s what you need to know about compliance and insurance implications.

Support for Windows 10 ended on October 14, 2025. Microsoft no longer provides free security updates, patches, or technical support for Windows 10 devices such as laptops.

While such devices may still work, they are no longer maintained or protected by Microsoft, posing a very real security and compliance risk to any company that still uses them.

For many organizations, especially those with HR and payroll platforms running on older machines, this deadline poses a serious risk. These devices may not be in the foreground, but are often still connected to core systems or data and can be vulnerable.

Security and compliance are the main risks

The first thing to think about is safety, but also compliance. Now that Windows 10 is no longer receiving updates, no new free security patches will be available from Microsoft. This means that any vulnerabilities discovered after October 14, 2025 will remain unpatched. Today, cybercrime is at an all-time high and from that perspective, the risk of your business devices being exposed is high.

From a compliance perspective, companies may also need to review their cyber insurance policies (if applicable). If a corporate device is running unsupported software, it may be outside the scope of the policy. If your business experiences an incident after October 14 and is still dependent on Windows 10 devices, your insurance claim may be questioned or denied depending on the wording of your policy. Similarly, for any organization that processes personal information, such as employee data, financial data or health data, the use of unsupported systems may run counter to the impression that reasonable security measures are being taken under applicable local privacy laws.

Devices will become targets

Many people might reasonably ask: Why should I be a target? Why would someone go after my company? There are millions of people out there. But this is less about specific targeting and more about visibility.

Now that support for Windows 10 is over, malicious parties know that these devices exist and that patches are no longer available for them. This lack of patching means that unsupported devices can quickly become a weak point in the network. If a vulnerability is discovered and someone knows you or your company is running Windows 10, you or your company could be on a list without you knowing. That is the nature of today’s cyber landscape.

There is a common assumption among some business owners that they are unlikely to be targeted because their organization is too small or not widely known. However, this way of thinking can overlook how most cyber attacks now occur. Modern cybercrime is often opportunistic and automated. Attackers use tools that scan for legacy systems, and with Windows 10 no longer supported, any unpatched device can become a visible and vulnerable target.

The risk for HR and payroll systems

Functions like HR and payroll are especially compromised in this scenario, as they often rely on a mix of newer and older systems that may not always be prioritized in broader IT upgrade cycles. It’s not uncommon to see a payroll laptop used remotely, or an old office desktop still connected to an HR platform or printing system and running in the background.

While these devices may be inconspicuous in everyday business operations, they are often linked to sensitive data, and if left on Windows 10 they can quickly become the target of a breach, potentially leading to system outages. That is, if these machines are used to access onboarding portals, payroll systems, or employee databases, the risk extends across your operational environment.

Upgrade, replace or extend?

The good news is that not every Windows 10 machine needs to be replaced. Many can be upgraded to Windows 11, provided they meet the minimum hardware requirements. Microsoft offers a free tool called the PC Health Check app, which assesses whether a device is upgradable and also makes recommendations on how to optimize its performance.

When I recently upgraded, I backed up my files as a precaution, but the process went smoothly and required no reinstallation or disruption to my work. For many users, the update will install in the background and will simply prompt you to restart once it’s done.

However, there will be devices that cannot support Windows 11 due to age or specification limits. In those cases, companies face a decision. One option is to purchase extended security support from Microsoft or a third-party vendor, such as Trend Micro. These services can provide protection for a limited time, but come at a cost and should be seen as a short-term measure rather than a strategic solution. Every dollar spent on extended support is a dollar not invested in more capable, modern hardware that may provide greater value in the long run.

For businesses choosing to replace devices, the range of options available is greater than ever. There is strong growth in demand for AI-enabled PCs, and while the term may seem like marketing hype, these machines can deliver real benefits even to users who don’t use AI applications.

The business case for upgrading

Modern devices running Windows 11 offer a number of practical benefits in addition to security. One of the big developments in the market is the rise of AI-ready devices. Many people hear the term and assume it is only for data scientists or developers, but that is not the case.

AI-ready hardware is designed to work more efficiently. The way they manage battery life, video conferencing, and processing power gives the everyday user a better experience. They are cooler, quieter and more energy efficient. For mobile workers or people who are on video calls all day, the improvement is noticeable. You don’t need to do any AI work to get value from these machines.

There could also be better integration between hardware and software, which could help extend the life of devices and reduce the frequency of support calls or downtime. This is important for teams that rely on consistent access to systems, especially when working remotely or in multiple locations.

Don’t forget recycling

When planning device upgrades or replacements, it is important not to overlook the issue of durability. Many organizations end up storing outdated devices in back rooms or sending them to landfill. However, a growing number of technology providers are now offering responsible recycling or buyback programs, which can help companies retire their devices in a sustainable and compliant manner while offsetting the costs of modernization.

The end of support for Windows 10 is not just a technical deadline. It’s a safety milestone that puts real pressure on companies to modernize and reduce risk. Companies can start by auditing all devices currently used to access sensitive systems. This includes laptops used for payroll processing, desktops that connect to HR platforms, and any legacy endpoints used offsite or in satellite locations. Run the PC Health Check app across your fleet and determine which devices are upgradeable and which need to be replaced.

For every business leader, especially those responsible for people/HR, payroll or compliance, now is the time to take stock. Understand where your exposure lies. Develop a transition plan. Consider your devices as part of a broader strategy, not just for security, but also for productivity, support, and sustainability.

Stay up to date with our stories on LinkedIn, Tweet, Facebook And Instagram.