United States | English Locations

855.558.3856 Start Your Data Recovery
855.558.3856
855.558.3856
Start Your Data Recovery

Ransomware Attack on Server and Backup Tapes Erased

Written By: Ontrack

Date Published: August 14, 2022

Ransomware Attack on Server and Backup Tapes Erased

Arrow Left Back to listing

Challenge

A ransomware attack of a company server encrypted the Microsoft Dynamics 365 data and demanded payment. Recent backups of the server were stored on multiple LTO-6 backup tapes, which had been erased by the malware. 

Solution

After assessing the extent of the ransomware attack, Ontrack engineers identified the company’s backup tapes as the best option for data recovery—even though the malware had erased them. 23 LTO-6 backup tapes from the backup library were sent to the Ontrack office in Böblingen, Germany. Working in conjunction with the R&D department in the United Kingdom, Ontrack developed a custom solution to recover the data from the erased backup tapes.

Result

Ontrack restored 46TB of data from 18 of the LTO-6 tapes. Due to the type of attack on the tapes, Ontrack had to repair the logical damage, shipping the data and tapes separately back to the customer.

Subscribe

Related Topics

Data Recovery from Malware-Infected Virtual Files

Rescued MS SQL database from encrypted virtual backup on QNAP

Ransomware Recovery – Virtual Agent for Windows
Services
Products
Resources
About

KLDiscovery Ontrack, LLC, 9023 Columbine Road Eden Prairie, MN 55347, United States (see all locations)

© 2024 KLDiscovery Ontrack - All Rights Reserved.