Australia | English Locations

1800 316 658 Start Your Data Recovery
1800 316 658
1800 316 658
Start Your Data Recovery

Ransomware VBK Recoveries on Tape - Server & NAS Systems

Written By: Ontrack

Date Published: 1 September 2022 10:27:04 AM

Ransomware VBK Recoveries on Tape - Server & NAS Systems

Arrow Left Back to listing

The Situation

The attacked volume was originally also used to back up data to LTO8 tapes at regular intervals. Most of these backup tapes were also in the tape library at the time of the incident and were quickly formatted by the attackers. However, the customer was able to save an original unformatted tape with a fairly old backup date, which was then completely restored to the now empty Windows volume with a total of 6 TB. Only then was Ontrack commissioned to examine data recovery options. The HP server DL380 with the 55 3TB hard disks were transported to Ontrack in Böblingen Germany.

The Solution

During the diagnosis, a large number of the searched VEEAM vbk files were successfully found on the Windows volume with Ontrack Tools and 27 records were extracted according to a priority list. The restore of the LTO8 tape partially overwrote some of the data sets and damaged the backup files. 

The Resolution

A large part of the data could still be repaired and extracted in several steps.

Later on, 19 significantly older LTO8 quick formatted tape backups were successfully recovered too.The attack also affected numerous European sub offices of the customer. Here were predominantly QNAP NAS systems in use which had stored virtual VMs under VMware, including backup VMs that were partially deleted or internally reformatted with another file system. Ontrack was also able to successfully restore complete backup data in 90% of the seven cases ordered.

Subscribe

Related Topics

Ransomware attacks server – backup tapes erased

Merge files of damaged backup with corresponding virtual files

Emergency Recovery for School District with Large Tape Backup
Services
Products
Resources
About

KLDiscovery Ontrack Pty Ltd, Suite 9, 28 Donkin Street, West End, Brisbane, QLD 4101, Australia (see all locations)

© 2024 KLDiscovery Ontrack - All Rights Reserved.