The impact of compromised backups on ransomware outcomes


There are two main ways to recover encrypted data in a ransomware attack: restoring from backups and paying the ransom.

Compromising an organization’s backups enables adversaries to restrict their victim’s ability to recover encrypted data and dial-up the pressure to pay the ransom. This analysis explores the impact of backup compromise on the business and operational outcomes of a ransomware attack. It also shines light on the frequency of successful backup compromise across a range of industries.

Read more…
Source: Sophos