Backups need separation
A copy accessible through a compromised account may also be damaged. Separate backups and test restoration.
FinFly Explains / IT
What ransomware does
An extortion attack may block data access and threaten to publish stolen information.
During an incident
Isolate affected devices and involve incident responders. Preserve incident information; do not connect backups to an infected environment.
No recovery guarantee
Payment does not guarantee recovery. Prepare a recovery plan before an incident.
Method
Primary sources
The explainer is checked against these institutional and industry sources. Links open the original material.