When Ransomware Attacks: Recovering Encrypted Data

Written By: Ontrack

Date Published: 30 August, 2022 11:57:58 AM GMT-04:00

When Ransomware Attacks: Recovering Encrypted Data

When it comes to ransomware attacks, Ontrack’s data recovery experts recommend three must-have tips to keep in mind:

  1. Have A Plan
    Malware authors would prefer to catch ransomware victims panicked and off guard, leading them to engage in mistakes (such as trying to negotiate) which will inevitably make matters worse. Having a plan of action, including reporting the attack to the proper authorities, evaluating the damage, tracking the path of the attack, and determining your backup options, are key in recovering data that has been encrypted during a ransomware incident.
  2. Stick To the Plan
    In the event that you or your organization falls victim to a ransomware attack, it’s important to stick to the plan of action that has been created. Oftentimes, panic causes victims to change course, however, following the steps of your pre-determined plan and reaching out to a ransomware recovery professional as early as possible can make a world of difference in the effectiveness of data recovery.
  3. Avoid DIY Attempts
    Ontrack’s experts caution against DIY attempts to recover data in any scenario, however, attempting to decrypt affected data in ransomware incidents is particularly harmful and could even lead to escalated ransom attempts. Leave the data recovery to the professionals.

According to Cybersecurity Ventures predictions, a new business will fall victim to ransomware every 11 seconds this year alone. Even organizations such as schools and hospitals have seen a rise in threats recently. While ransomware data recovery can be complex, Ontrack’s engineers provide the best possible solution for success. Our investment in the development of specialized software allows us to recover data from ransomware-encrypted systems, virtual machines, backup files, tapes, and other storage media.

Learn more about how Ontrack can help recover encrypted data from ransomware attacks on our Ransomware FAQ page.

Should you find your organization facing a ransomware attack, don’t hesitate to contact the experts at Ontrack to help successfully recover your data. 


Ransomware Recovery


KLDiscovery Ontrack Pte Ltd, 148 Electric Road 12/F, Unit 1203A, North Point, Hong Kong (see all locations)