{"id":16810,"date":"2018-03-21T12:05:36","date_gmt":"2018-03-21T11:05:36","guid":{"rendered":"https:\/\/dev.databack.fr\/non-categorise\/ransomware-rapid-a-new-data-recovery-by-databack\/"},"modified":"2026-06-30T16:58:05","modified_gmt":"2026-06-30T14:58:05","slug":"ransomware-rapid-a-new-data-recovery-by-databack","status":"publish","type":"post","link":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/","title":{"rendered":"Ransomware RAPID, a new data recovery by Databack"},"content":{"rendered":"<h4><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter size-full wp-image-6005\" src=\"https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/IMAGE-ARTICLE-RANSOMWARE-20180321.jpg\" alt=\"rapid-ransomware-data-recovery\" width=\"961\" height=\"500\" srcset=\"https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/IMAGE-ARTICLE-RANSOMWARE-20180321.jpg 961w, https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/IMAGE-ARTICLE-RANSOMWARE-20180321-600x312.jpg 600w, https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/IMAGE-ARTICLE-RANSOMWARE-20180321-300x156.jpg 300w, https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/IMAGE-ARTICLE-RANSOMWARE-20180321-768x400.jpg 768w\" sizes=\"(max-width: 961px) 100vw, 961px\" \/><\/h4>\n<h4>This month, <strong>DATABACK<\/strong> successfully recovered data from the Rapid ransomware. It had encrypted all the data on an EPHAD server. <\/h4>\n<h2>The situation: a RAID 5 server encrypted by the RAPID ransomware<\/h2>\n<p>Our customer entrusted us with an NEC server consisting of 4 x 300 GB hard disks organized in <a href=\"https:\/\/dev.databack.fr\/en\/data-recovery-expert\/raid-system\/raid-5\/\" target=\"_blank\" rel=\"noopener noreferrer\">RAID5<\/a>, forming a volume of 900 GB. This main server, which was backed up<strong>, contained the <\/strong><strong>business and administrative<\/strong><strong> data required for <\/strong><strong>the smooth running of the institution.<\/strong> The &#8216;Rapid&#8217; ransomware had encrypted the backups as well as the server data. <\/p>\n<p><strong>The business software provider could only observe that the backups in Acronis format (*.tib) <\/strong><strong>were all unusable.<\/strong><\/p>\n<h2>Our intervention: decryption and recovery<\/h2>\n<p style=\"text-align: left;\">Our laboratory therefore received all the equipment for data recovery. After securing all the disks, our technicians found that the type of data encryption was known and had already been analyzed by our services. <\/p>\n<p>Our<strong> proprietary tools<\/strong>, developed by our technical department, were able to restore access to encrypted data zones. Technicians <strong>were thus able to recover business and <\/strong><strong>user<\/strong> <strong>data <\/strong><strong>with the correct tree structure.<\/strong> <\/p>\n<h2>The result<\/h2>\n<p>The Databack laboratory verified the integrity of the recovered files, enabling us to return the data to our customer quickly and efficiently.<\/p>\n\n<div class=\"wp-block-button aligncenter\"><a class=\"wp-block-button__link has-blanc-color has-orange-background-color has-text-color has-background wp-element-button\" href=\"https:\/\/dev.databack.fr\/en\/contact-2\/\">Get a free quote<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>This month, DATABACK successfully recovered data from the Rapid ransomware. It had encrypted all the data on an EPHAD server. The situation: a RAID 5 server encrypted by the RAPID ransomware Our customer entrusted us with an NEC server consisting of 4 x 300 GB hard disks organized in RAID5, forming a volume of 900 [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":14207,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[133,77],"tags":[],"ppma_author":[143],"class_list":["post-16810","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-ransomware-incidents","author-jean-pierre-saunier-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>RAPID Ransomware, new data recovery - Databack<\/title>\n<meta name=\"description\" content=\"EHPAD victim of Rapid ransomware. Databack recovered the encrypted data using a method developed in our laboratory. Find out more.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"RAPID Ransomware, new data recovery - Databack\" \/>\n<meta property=\"og:description\" content=\"EHPAD victim of Rapid ransomware. Databack recovered the encrypted data using a method developed in our laboratory. Find out more.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/\" \/>\n<meta property=\"og:site_name\" content=\"Databack\" \/>\n<meta property=\"article:published_time\" content=\"2018-03-21T11:05:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-30T14:58:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/Ransomware-RAPID-une-nouvelle-recuperation-de-donnees-par-Databack.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"533\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Jean-Pierre Saunier\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jean-Pierre Saunier\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"RAPID Ransomware, new data recovery - Databack","description":"EHPAD victim of Rapid ransomware. Databack recovered the encrypted data using a method developed in our laboratory. Find out more.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/","og_locale":"en_US","og_type":"article","og_title":"RAPID Ransomware, new data recovery - Databack","og_description":"EHPAD victim of Rapid ransomware. Databack recovered the encrypted data using a method developed in our laboratory. Find out more.","og_url":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/","og_site_name":"Databack","article_published_time":"2018-03-21T11:05:36+00:00","article_modified_time":"2026-06-30T14:58:05+00:00","og_image":[{"width":800,"height":533,"url":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/Ransomware-RAPID-une-nouvelle-recuperation-de-donnees-par-Databack.png","type":"image\/png"}],"author":"Jean-Pierre Saunier","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Jean-Pierre Saunier","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/#article","isPartOf":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/"},"author":{"name":"Jean-Pierre Saunier","@id":"https:\/\/dev.databack.fr\/en\/#\/schema\/person\/efaf23b6bcc1d3bcbdf8a85387540681"},"headline":"Ransomware RAPID, a new data recovery by Databack","datePublished":"2018-03-21T11:05:36+00:00","dateModified":"2026-06-30T14:58:05+00:00","mainEntityOfPage":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/"},"wordCount":210,"publisher":{"@id":"https:\/\/dev.databack.fr\/en\/#organization"},"image":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/#primaryimage"},"thumbnailUrl":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/Ransomware-RAPID-une-nouvelle-recuperation-de-donnees-par-Databack.png","articleSection":["BLOG","Ransomware incidents"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/","url":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/","name":"RAPID Ransomware, new data recovery - Databack","isPartOf":{"@id":"https:\/\/dev.databack.fr\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/#primaryimage"},"image":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/#primaryimage"},"thumbnailUrl":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/Ransomware-RAPID-une-nouvelle-recuperation-de-donnees-par-Databack.png","datePublished":"2018-03-21T11:05:36+00:00","dateModified":"2026-06-30T14:58:05+00:00","description":"EHPAD victim of Rapid ransomware. Databack recovered the encrypted data using a method developed in our laboratory. Find out more.","breadcrumb":{"@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/#primaryimage","url":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/Ransomware-RAPID-une-nouvelle-recuperation-de-donnees-par-Databack.png","contentUrl":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2018\/03\/Ransomware-RAPID-une-nouvelle-recuperation-de-donnees-par-Databack.png","width":800,"height":533},{"@type":"BreadcrumbList","@id":"https:\/\/dev.databack.fr\/en\/blog\/ransomware-rapid-a-new-data-recovery-by-databack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"R\u00e9cup\u00e9ration de donn\u00e9es","item":"https:\/\/dev.databack.fr\/en\/"},{"@type":"ListItem","position":2,"name":"Ransomware RAPID, a new data recovery by Databack"}]},{"@type":"WebSite","@id":"https:\/\/dev.databack.fr\/en\/#website","url":"https:\/\/dev.databack.fr\/en\/","name":"Databack","description":"Laboratoire fran\u00e7ais de traitement de donn\u00e9es sensibles et volumineuses","publisher":{"@id":"https:\/\/dev.databack.fr\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dev.databack.fr\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/dev.databack.fr\/en\/#organization","name":"Datenabruf","url":"https:\/\/dev.databack.fr\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dev.databack.fr\/en\/#\/schema\/logo\/image\/","url":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2025\/06\/favicon.png","contentUrl":"https:\/\/dev.databack.fr\/wp-content\/uploads\/2025\/06\/favicon.png","width":512,"height":512,"caption":"Datenabruf"},"image":{"@id":"https:\/\/dev.databack.fr\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/dev.databack.fr\/en\/#\/schema\/person\/efaf23b6bcc1d3bcbdf8a85387540681","name":"Jean-Pierre Saunier","description":"Titulaire d\u2019un DUT en g\u00e9nie \u00e9lectrique, Jean-Pierre Saunier int\u00e8gre un laboratoire de r\u00e9cup\u00e9ration de donn\u00e9es o\u00f9 il \u00e9volue successivement aux postes de technicien, d\u00e9veloppeur, puis ing\u00e9nieur. Il y exerce pendant pr\u00e8s de 17 ans, avant de rejoindre l\u2019\u00e9quipe de DATABACK en 2023 en tant qu\u2019ing\u00e9nieur R&amp;D sp\u00e9cialis\u00e9 en r\u00e9cup\u00e9ration de donn\u00e9es. Expert judiciaire pr\u00e8s du Tribunal de Poitiers, il intervient en tant que Forensic Investigator, notamment dans le cadre d\u2019enqu\u00eates num\u00e9riques et d\u2019analyses techniques complexes. Fort de 18 ann\u00e9es d\u2019exp\u00e9rience, il allie expertise en r\u00e9cup\u00e9ration de donn\u00e9es, ma\u00eetrise du reverse engineering sur syst\u00e8mes et formats de fichiers, ainsi qu\u2019un haut niveau de comp\u00e9tence en d\u00e9veloppement et exploitation binaire.","sameAs":["https:\/\/www.linkedin.com\/in\/jean-pierre-saunier-9a978392\/"]}]}},"authors":[{"term_id":143,"user_id":0,"is_guest":1,"slug":"jean-pierre-saunier-en","display_name":"Jean-Pierre Saunier","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","author_category":"","first_name":"","last_name":"","user_url":"","job_title":"","description":""}],"_links":{"self":[{"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/posts\/16810","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/comments?post=16810"}],"version-history":[{"count":1,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/posts\/16810\/revisions"}],"predecessor-version":[{"id":19653,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/posts\/16810\/revisions\/19653"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/media\/14207"}],"wp:attachment":[{"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/media?parent=16810"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/categories?post=16810"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/tags?post=16810"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/dev.databack.fr\/en\/wp-json\/wp\/v2\/ppma_author?post=16810"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}