Microsoft will no longer release security updates for SQL Server 2008 and SQL Server 2008 R2 after July 9, 2019. In addition, they will no longer release security updates for Windows Server 2008 and Windows Server 2008 R2 starting January 14, 2020. Remaining on legacy infrastructure exposes your business to security threats, makes you non-compliant with regulations, and is more costly to operate.