Client hit by ransomware
A multi-million-dollar ransom demand, deleted backups, and back online in under 24 hours
- Ransomware recovery
- Off-site backup
- Disaster recovery
A ransomware attack shut this client's operations down completely. The attackers demanded a multi-million-dollar ransom. They had also deleted the client's online backups, leaving the business at a standstill.
Why attackers delete backups
Backups are the reason a company can refuse to pay. So attackers often go after them first. When the online copies are gone, the owner is left looking at a ransom note and a business that can't work.
What we did
- We had already set up a secure off-site backup and disaster recovery strategy for this client, before the attack.
- We restored the client's systems and data in less than 24 hours.
What it changed
The business was fully back online without paying the ransom. That result came from preparation done before the attack, which is why we push so hard on backups kept away from the main network.