United States | English Locations

855.558.3856 Start Your Data Recovery
855.558.3856
855.558.3856
Start Your Data Recovery

Ransomware Recoveries on Tape – Server and NAS Systems

Written By: Ontrack

Date Published: August 14, 2022

Ransomware Recoveries on Tape – Server and NAS Systems

Arrow Left Back to listing

Challenge

This customer suffered a cyberattack wherein the attacked volume was originally used to back up data to LTO8 tapes at regular intervals. Most of these backup tapes were in the tape library at the time of the incident and were quickly formatted by the attackers. However, the customer saved an original unformatted tape with a relatively old backup date, which was then completely restored to the now empty Windows volume with a total of 6 TB. Only then did the customer commission Ontrack to examine the data recovery options.

Additionally, the attack affected numerous European suboffices of the customer where there were predominantly QNAP NAS systems in use.

Solution

The HP server DL380 with the 55 3TB hard disks and LTO8 tapes were transported to Ontrack in Böblingen, Germany. During the diagnosis, a large number of the searched files were successfully found on the Windows volume using Ontrack’s proprietary tools and 27 records were extracted according to a priority list.

The restoration of the LTO8 tape partially overwrote some of the data sets and damaged the backup files. However, a large part of the data could still be repaired and extracted in several steps. At a later time, 19 significantly older LTO8 quick formatted tape backups were successfully recovered from the ransomware attack as well.

The QNAP NAS systems had stored virtual VMs under VMware, including backup VMs that were partially deleted or internally reformatted with another file system. 

Result

Ontrack successfully restored complete backup data in 90% of the seven cases ordered.

Subscribe

Related Topics

Ransomware Attack on Server and Backup Tapes Erased

New tools made recovery from highly specialized EMC® Isilon® possible

A leading IT services company needed to access legacy tapes in a short timeframe.
Services
Products
Resources
About

KLDiscovery Ontrack, LLC, 9023 Columbine Road Eden Prairie, MN 55347, United States (see all locations)

© 2024 KLDiscovery Ontrack - All Rights Reserved.