{"id":16438,"date":"2024-06-12T10:04:40","date_gmt":"2024-06-12T08:04:40","guid":{"rendered":"https:\/\/dev.databack.fr\/non-categorise\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/"},"modified":"2025-06-30T17:18:19","modified_gmt":"2025-06-30T15:18:19","slug":"databack-success-stories-remote-recovery-following-a-ransomware-attack","status":"publish","type":"post","link":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/","title":{"rendered":"Databack success stories: remote recovery following a ransomware attack"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><em>Cybersecurity has become a key priority for businesses worldwide. <strong>Ransomware attacks<\/strong> represent a growing threat, disrupting operations and jeopardizing business continuity. Recently, DATABACK was called in to intervene in a <strong>ransomware attack at the Australian subsidiary <\/strong>of a French group, demonstrating the effectiveness and speed of our <strong>remote data recovery<\/strong> solution.  <\/em><\/p>\n\n<figure class=\"wp-block-image size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"600\" height=\"250\" src=\"https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/recuperation-a-distance-cyberattaque.jpeg\" alt=\"data recovery cyber attack australia\" class=\"wp-image-10471\" srcset=\"https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/recuperation-a-distance-cyberattaque.jpeg 600w, https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/recuperation-a-distance-cyberattaque-300x125.jpeg 300w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/figure>\n\n<h2 class=\"wp-block-heading\">Case study: full encryption at an Australian subsidiary<\/h2>\n\n<p class=\"wp-block-paragraph\">The Australian subsidiary of a French group suffered a <strong>complete encryption of<\/strong> its information system, affecting both production and backups. This situation paralyzed the subsidiary&#8217;s sales and after-sales service, at a time of intense activity. Although the group had put in place a <strong>Business Continuity Plan<\/strong> (BCP) and a Disaster <strong>Recovery Plan<\/strong> (DRP) to identify local partners capable of responding to security incidents, the local service provider was unable to restore the encrypted data.  <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<p class=\"wp-block-paragraph\">Faced with this impasse, the group decided to call on its French service provider, DATABACK, to find a <strong>rapid recovery solution<\/strong>. A crisis unit was set up, contacting us to assess the damage and determine the available solutions. <strong>Coordination with the onsite CERT<\/strong> and the customer was essential for effective management of the situation.  <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<h2 class=\"wp-block-heading\">Deploying remote recovery solutions<\/h2>\n\n<p class=\"wp-block-paragraph\">Our initial findings revealed complete encryption of the VEEAM servers and backup files. The distance and time difference necessitated an <strong>urgent service response (HNO)<\/strong> using our proprietary remotely deployable tools. This approach considerably reduced the response time, enabling <strong>rapid analysis of the encrypted files<\/strong> without the need for hardware shipment.  <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<p class=\"wp-block-paragraph\">We immediately activated our on-call service to assess the feasibility of remote data recovery. In less than 24 hours, we provided the group with a full diagnosis and assessment of recovery options. Our solution was to deploy <strong>remote recovery tools<\/strong>, enabling access to the affected servers and the analysis of encrypted files without the need for physical transfer of hardware.  <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<p class=\"wp-block-paragraph\">Using our proprietary tools, we were able to bypass the data encryption and begin recovery. Working closely with on-site teams and CERT, we were able to access VEEAM backups and production servers. Our advanced recovery technology enabled us to intervene on the data and <strong>restore<\/strong> it <strong>on secure servers<\/strong>.  <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<p class=\"wp-block-paragraph\">Thanks to our rapid intervention, the Australian subsidiary was able to <strong>recover all its critical data in just 72 hours<\/strong>. This rapid turnaround enabled the company to resume operations without incurring significant losses, even during a period of intense activity. The success of this operation demonstrated the effectiveness of our remote recovery solution, capable of handling complex and critical situations.  <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<h2 class=\"wp-block-heading\">New international partnerships and remote support<\/h2>\n\n<p class=\"wp-block-paragraph\">Building on this successful experience, DATABACK has established <strong>partnerships <\/strong>with incident response providers in several countries. This initiative aims to offer and deploy our <strong>innovative remote data recovery solution<\/strong> on a global scale. <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<p class=\"wp-block-paragraph\">Since this intervention, three other foreign companies have already benefited from our <strong>remote data recovery services<\/strong>, reinforcing our ability to help businesses recover quickly from ransomware attacks.<\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<p class=\"wp-block-paragraph\">This success story illustrates our commitment and expertise in cybersecurity. DATABACK can respond quickly and efficiently, wherever you are. Our team is ready to provide immediate support to ensure the protection and <strong>restoration of your critical data<\/strong>.  <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity has become a key priority for businesses worldwide. Ransomware attacks represent a growing threat, disrupting operations and jeopardizing business continuity. Recently, DATABACK was called in to intervene in a ransomware attack at the Australian subsidiary of a French group, demonstrating the effectiveness and speed of our remote data recovery solution. Case study: full encryption [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":15143,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[133,77],"tags":[],"ppma_author":[143],"class_list":["post-16438","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-ransomware-incidents","author-jean-pierre-saunier-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Databack - Remote recovery from ransomware attacks<\/title>\n<meta name=\"description\" content=\"Our team was called in to intervene in a ransomware attack on the Australian subsidiary of a French group.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Databack - Remote recovery from ransomware attacks\" \/>\n<meta property=\"og:description\" content=\"Our team was called in to intervene in a ransomware attack on the Australian subsidiary of a French group.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/\" \/>\n<meta property=\"og:site_name\" content=\"Databack\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-12T08:04:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-30T15:18:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/cyberattaque-recuperation-a-distance.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jean-Pierre Saunier\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jean-Pierre Saunier\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Databack - Remote recovery from ransomware attacks","description":"Our team was called in to intervene in a ransomware attack on the Australian subsidiary of a French group.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/","og_locale":"en_US","og_type":"article","og_title":"Databack - Remote recovery from ransomware attacks","og_description":"Our team was called in to intervene in a ransomware attack on the Australian subsidiary of a French group.","og_url":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/","og_site_name":"Databack","article_published_time":"2024-06-12T08:04:40+00:00","article_modified_time":"2025-06-30T15:18:19+00:00","og_image":[{"width":600,"height":400,"url":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/cyberattaque-recuperation-a-distance.jpeg","type":"image\/jpeg"}],"author":"Jean-Pierre Saunier","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Jean-Pierre Saunier","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/#article","isPartOf":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/"},"author":{"name":"Jean-Pierre Saunier","@id":"https:\/\/dev.databack.fr\/en\/#\/schema\/person\/efaf23b6bcc1d3bcbdf8a85387540681"},"headline":"Databack success stories: remote recovery following a ransomware attack","datePublished":"2024-06-12T08:04:40+00:00","dateModified":"2025-06-30T15:18:19+00:00","mainEntityOfPage":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/"},"wordCount":521,"publisher":{"@id":"https:\/\/dev.databack.fr\/en\/#organization"},"image":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/cyberattaque-recuperation-a-distance.jpeg","articleSection":["BLOG","Ransomware incidents"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/","url":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/","name":"Databack - Remote recovery from ransomware attacks","isPartOf":{"@id":"https:\/\/dev.databack.fr\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/#primaryimage"},"image":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/cyberattaque-recuperation-a-distance.jpeg","datePublished":"2024-06-12T08:04:40+00:00","dateModified":"2025-06-30T15:18:19+00:00","description":"Our team was called in to intervene in a ransomware attack on the Australian subsidiary of a French group.","breadcrumb":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/#primaryimage","url":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/cyberattaque-recuperation-a-distance.jpeg","contentUrl":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2024\/06\/cyberattaque-recuperation-a-distance.jpeg","width":600,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/dev.databack.fr\/en\/blog\/databack-success-stories-remote-recovery-following-a-ransomware-attack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"R\u00e9cup\u00e9ration de donn\u00e9es","item":"https:\/\/dev.databack.fr\/en\/"},{"@type":"ListItem","position":2,"name":"Databack success stories: remote recovery following a ransomware attack"}]},{"@type":"WebSite","@id":"https:\/\/dev.databack.fr\/en\/#website","url":"https:\/\/dev.databack.fr\/en\/","name":"Databack","description":"Laboratoire fran\u00e7ais de traitement de donn\u00e9es sensibles et volumineuses","publisher":{"@id":"https:\/\/dev.databack.fr\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dev.databack.fr\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/dev.databack.fr\/en\/#organization","name":"Datenabruf","url":"https:\/\/dev.databack.fr\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dev.databack.fr\/en\/#\/schema\/logo\/image\/","url":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2025\/06\/favicon.png","contentUrl":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2025\/06\/favicon.png","width":512,"height":512,"caption":"Datenabruf"},"image":{"@id":"https:\/\/dev.databack.fr\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/dev.databack.fr\/en\/#\/schema\/person\/efaf23b6bcc1d3bcbdf8a85387540681","name":"Jean-Pierre Saunier","description":"Titulaire d\u2019un DUT en g\u00e9nie \u00e9lectrique, Jean-Pierre Saunier int\u00e8gre un laboratoire de r\u00e9cup\u00e9ration de donn\u00e9es o\u00f9 il \u00e9volue successivement aux postes de technicien, d\u00e9veloppeur, puis ing\u00e9nieur. Il y exerce pendant pr\u00e8s de 17 ans, avant de rejoindre l\u2019\u00e9quipe de DATABACK en 2023 en tant qu\u2019ing\u00e9nieur R&amp;D sp\u00e9cialis\u00e9 en r\u00e9cup\u00e9ration de donn\u00e9es. Expert judiciaire pr\u00e8s du Tribunal de Poitiers, il intervient en tant que Forensic Investigator, notamment dans le cadre d\u2019enqu\u00eates num\u00e9riques et d\u2019analyses techniques complexes. Fort de 18 ann\u00e9es d\u2019exp\u00e9rience, il allie expertise en r\u00e9cup\u00e9ration de donn\u00e9es, ma\u00eetrise du reverse engineering sur syst\u00e8mes et formats de fichiers, ainsi qu\u2019un haut niveau de comp\u00e9tence en d\u00e9veloppement et exploitation binaire.","sameAs":["https:\/\/www.linkedin.com\/in\/jean-pierre-saunier-9a978392\/"]}]}},"authors":[{"term_id":143,"user_id":0,"is_guest":1,"slug":"jean-pierre-saunier-en","display_name":"Jean-Pierre Saunier","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","author_category":"","first_name":"","last_name":"","user_url":"","job_title":"","description":""}],"_links":{"self":[{"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/posts\/16438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/comments?post=16438"}],"version-history":[{"count":0,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/posts\/16438\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/media\/15143"}],"wp:attachment":[{"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/media?parent=16438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/categories?post=16438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/tags?post=16438"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/ppma_author?post=16438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}