Need Help Retrieving Missing Azure Backups After Ransomware Attack
Asked by
CloudExplorer88
My company recently experienced a ransomware attack, and while we were able to locate backups for one of our three servers hosted on Azure, we can't find the backups for the other two. We last received emails confirming backups about a week ago for these two servers, and now we're in a bind trying to get assistance from the Azure community support without much success. Are there any third-party IT consulting services that specialize in Azure backup recovery who can guide us through this situation? Thanks in advance for any help!
Answers
I went through something similar a couple of years back. A ransomware incident hit a client's server while we were trying to recover their backups. We couldn't find them either until we realized that even though the backups existed, the ransomware had attempted to delete the backup chain. So, be sure to check your vault for any deleted backups or servers there! It could be that they’re still retrievable from your backup vault.
Reply to this answer
Hey, I used to be an Azure Backup SME. If you want, I can help you out. Just ping me in the chat tomorrow!
Reply to this answer
Just to clarify, are you unable to find the vault itself, or do you just not see the servers listed in it? Remember that vaults can have configurations like soft deletes and immutability settings. If you haven't set up either of those, it could complicate things a lot.
Reply to this answer
Honestly, you might hit a wall with Azure community support unless you raise a paid support ticket. If you put your affected subscription on a Standard support plan, you’re likely to get much better assistance. Only Microsoft has the necessary access to help with the restoration.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions