{"id":91269,"date":"2019-06-27T14:15:26","date_gmt":"2019-06-27T21:15:26","guid":{"rendered":"https:\/\/www.backblaze.com\/blog\/?p=91269"},"modified":"2025-12-12T12:51:57","modified_gmt":"2025-12-12T20:51:57","slug":"how-to-deal-with-ransomware","status":"publish","type":"post","link":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/","title":{"rendered":"When Ransomware Strikes"},"content":{"rendered":"

\"Ransomware<\/p>\n

Does this sound familiar? An employee walks over with panic and confusion written all over their face. They approach holding their laptop and say that they\u2019re not sure what happened. You open their computer to find that there is a single message displayed:<\/p>\n

You want your files?
\nYour computer has been infected with ransomware and you will need to pay us to get them back.<\/p>\n

They may not know what just happened, but the sinking feeling in your stomach has a name you know well. Your company has been hit with ransomware, which is, unfortunately, a growing trend. The business of ransomware is a booming one, bringing productivity and growth to a dead stop.<\/p>\n

As ransomware attacks increase on businesses of all sizes, ransomware may prove to be the single biggest destructive force for business data, surpassing even hard drive failures<\/a> as the leader of data loss.<\/p>\n

When Ransomware Strikes<\/h2>\n

It\u2019s a situation that most IT Managers will face at some point in their career. Per Security Magazine<\/em>, \u201cEighty-six percent Small to Medium Business (SMB) clients were recently victimized by ransomware.\u201d In fact, it happened to us<\/a> at Backblaze. Cybersecurity company Ice Cybersecurity published that ransomware attacks occur every 40 seconds (that\u2019s over 2,000 times per day!). Coveware’s Ransomware Marketplace Report<\/em> says that the average ransom cost has increased by 89% to $12,762, as compared to $6,733 in Q4 of 2018. The downtime resulting from ransomware is also on the rise. The average number of days a ransomware incident lasts amounts to just over a week at 7.3 days, which should be factored in when calculating the true cost of ransomware. The estimated downtime costs per ransomware attack per company averaged $65,645. The increasing financial impact on businesses of all sizes has proven that the business of ransomware is booming<\/a>, with no signs of slowing down.<\/p>\n

How Has Ransomware Grown So Quickly?<\/h2>\n

Ransomware has taken advantage of multiple developments in technology, similar to other high-growth industries. The first attacks occurred in 1989<\/a> with floppy desks distributed across organizations, purporting to raise money to fund AIDS research. At the time, the users were asked to pay $189 to get their files back.<\/p>\n

Since then, ransomware has grown significantly due to the advent of multiple facilitators. Sophisticated RSA encryption<\/a> with increasing key sizes make encrypted files more difficult to decrypt. Per the Carbon Black<\/em> report<\/a>, ransomware kits are now relatively easy to access on the dark web and only cost $10, on average. With cryptocurrency in place, payment is both virtually untraceable and irreversible. As recovery becomes more difficult, the cost to business rises alongside it. Per the Atlantic<\/em><\/a>, ransomware now costs businesses more than $75 billion per year.<\/p>\n

If Your Job is Protecting Company Data, What Happens After Your Ransomware Attack?<\/h2>\n

Isolate, Assess, Restore<\/h3>\n

Your first thought will probably be that you need to isolate any infected computers and get them off the network. Next, you may begin to assess the damage by determining the origins of the infected file and locating others that were affected. You can check our guide for recovering from ransomware<\/a> or call in a specialized team to assist you. Once you prevent the malware from spreading, your thoughts will surely turn to the backup strategy<\/a> you have in place. If you have used either a backup or sync solution<\/a> to get your data offsite, you are more prepared than most. Unfortunately, even for this Eagle Scout level of preparedness, too often the backup solution hasn\u2019t been tested against the exact scenario it’s needed for.<\/p>\n

Both backup and sync solutions help get your data offsite. However, sync solutions vary greatly in their process for backup. Some require saving data to a specific folder. Others provide versions of files. Most offer varying pricing tiers for storage space. Backup solutions also have a multitude of features, some of which prove vital at the time of restore.<\/p>\n

If you are in IT, you are constantly looking for points of failure. When it comes time to restore your data after a ransomware attack<\/a>, three weak points immediately come to mind:<\/p>\n

\n

1. Your Security Breach Has Affected Your Backups<\/h4>\n

Redundancy is key in workflows. However, if you are syncing your data and get hit with ransomware on your local machine, your newly infected files will automatically sync to the cloud and thereby, infect your backup set.<\/p>\n

This can be mitigated with backup software that offers multiple versions of your files. Backup software<\/a>, such as Backblaze Business Backup<\/a>, saves your original file as is and creates a new backup file with every change made. If you accidentally delete a file or if your files are encrypted by ransomware and you are backed up with Backblaze Business Backup<\/a>, you can simply restore a prior version of a file — one that has not been encrypted by the ransomware. The capability of your backup software to restore a prior version is the difference between usable and unusable data.<\/p>\n

2. Restoring Data will be Cumbersome and Time-Consuming<\/h4>\n

Depending on the size of your dataset, restoring from the cloud can be a drawn out process. Moreover, for those that need to restore gigabytes of data, the restore process may not only prove to be lengthy, but also tedious.<\/p>\n

Snapshots allow you to restore all of your data from a specific point in time. When dealing with ransomware, this capability is crucial. Without this functionality, each file needs to be rolled back individually to a prior version and downloaded one at a time. At Backblaze, you can easily create a snapshot of your data and archive those snapshots into cloud storage<\/a> to give you the appropriate amount of time to recover.<\/p>\n

You can download the files your employees need immediately and request the rest of their data to be shipped to you on a USB drive. You can choose to keep the drive or return it for a full refund.<\/p>\n

3. All Critical Data Didn\u2019t Get Backed Up<\/h4>\n

Unfortunately, human error is the second leading cause of data loss. As humans, we all make mistakes and some of those may have a large impact on company data. Although there is no way to prevent employees from spilling drinks on computers or leaving laptops on planes, others are easier to avoid. Some solutions require users to save their data to a specific folder to enable backups. When thinking about the files on your average employees\u2019 desktops, are there any that may prove critical to your business? If so, they need to be backed up. Relying on those employees to change their work habits and begin saving files to specific, backed-up locations is certainly not the easiest nor reliable method of data protection.<\/p>\n

In fact, it is the responsibility of the backup solution to protect business data, regardless of where the end user saves it. To that end, Backblaze backs up all user-generated data by default. The most effective backup solutions are ones that are easiest for the end users and require the least amount of user intervention.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

To better understand innovative ways that you can protect business data, we invite you to attend our Ransomware: Prevention and Survival webinar on July 17, 2019<\/nobr>. You can sign-up using the link in the post.<\/p>\n","protected":false},"author":138,"featured_media":91281,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[475],"tags":[450,471,351,384],"class_list":["post-91269","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ransomware","tag-business-backup","tag-businessbackup","tag-ransomware","tag-security","entry"],"acf":[],"yoast_head":"\nRansomware Prevention: How to Deal With the Growing Threat<\/title>\n<meta name=\"description\" content=\"To better understand innovative ways that you can protect business data, we invite you to attend our Ransomware: Prevention and Survival webinar on July 17, 2019. You can sign-up using the link in the post.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware Prevention: How to Deal With the Growing Threat\" \/>\n<meta property=\"og:description\" content=\"To better understand innovative ways that you can protect business data, we invite you to attend our Ransomware: Prevention and Survival webinar on July 17, 2019. You can sign-up using the link in the post.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/\" \/>\n<meta property=\"og:site_name\" content=\"Backblaze Blog | Cloud Storage & Cloud Backup\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/backblaze\" \/>\n<meta property=\"article:published_time\" content=\"2019-06-27T21:15:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-12T20:51:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/06\/Ransomeware_Hero.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"820\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Natasha Rabinov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@backblaze\" \/>\n<meta name=\"twitter:site\" content=\"@backblaze\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Natasha Rabinov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ransomware Prevention: How to Deal With the Growing Threat","description":"To better understand innovative ways that you can protect business data, we invite you to attend our Ransomware: Prevention and Survival webinar on July 17, 2019. You can sign-up using the link in the post.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/","og_locale":"en_US","og_type":"article","og_title":"Ransomware Prevention: How to Deal With the Growing Threat","og_description":"To better understand innovative ways that you can protect business data, we invite you to attend our Ransomware: Prevention and Survival webinar on July 17, 2019. You can sign-up using the link in the post.","og_url":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/","og_site_name":"Backblaze Blog | Cloud Storage & Cloud Backup","article_publisher":"https:\/\/www.facebook.com\/backblaze","article_published_time":"2019-06-27T21:15:26+00:00","article_modified_time":"2025-12-12T20:51:57+00:00","og_image":[{"width":1440,"height":820,"url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/06\/Ransomeware_Hero.jpg","type":"image\/jpeg"}],"author":"Natasha Rabinov","twitter_card":"summary_large_image","twitter_creator":"@backblaze","twitter_site":"@backblaze","twitter_misc":{"Written by":"Natasha Rabinov","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/#article","isPartOf":{"@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/"},"author":{"name":"Natasha Rabinov","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/person\/1cb320467c8169617d0654bb693c6240"},"headline":"When Ransomware Strikes","datePublished":"2019-06-27T21:15:26+00:00","dateModified":"2025-12-12T20:51:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/"},"wordCount":1163,"commentCount":2,"publisher":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/06\/Ransomeware_Hero.jpg","keywords":["Backblaze Business Backup","BusinessBackup","Ransomware","Security"],"articleSection":["Ransomware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/","url":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/","name":"Ransomware Prevention: How to Deal With the Growing Threat","isPartOf":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/#primaryimage"},"image":{"@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/06\/Ransomeware_Hero.jpg","datePublished":"2019-06-27T21:15:26+00:00","dateModified":"2025-12-12T20:51:57+00:00","description":"To better understand innovative ways that you can protect business data, we invite you to attend our Ransomware: Prevention and Survival webinar on July 17, 2019. You can sign-up using the link in the post.","breadcrumb":{"@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/#primaryimage","url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/06\/Ransomeware_Hero.jpg","contentUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/06\/Ransomeware_Hero.jpg","width":1440,"height":820,"caption":"Ransomware Prevention & Survival"},{"@type":"BreadcrumbList","@id":"https:\/\/www.backblaze.com\/blog\/how-to-deal-with-ransomware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/"},{"@type":"ListItem","position":2,"name":"When Ransomware Strikes"}]},{"@type":"WebSite","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#website","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/","name":"Backblaze Cloud Solutions Blog","description":"Cloud Storage & Cloud Backup","publisher":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#organization","name":"Backblaze","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.backblaze.com\/blog\/wp-content\/uploads\/2017\/12\/backblaze_icon_transparent.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.backblaze.com\/blog\/wp-content\/uploads\/2017\/12\/backblaze_icon_transparent.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"Backblaze"},"image":{"@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/backblaze","https:\/\/x.com\/backblaze","https:\/\/www.youtube.com\/user\/Backblaze","https:\/\/en.wikipedia.org\/wiki\/Backblaze"]},{"@type":"Person","@id":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/#\/schema\/person\/1cb320467c8169617d0654bb693c6240","name":"Natasha Rabinov","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/04\/natasha-150x150.png","url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/04\/natasha-150x150.png","contentUrl":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/04\/natasha-150x150.png","caption":"Natasha Rabinov"},"description":"Natasha Rabinov is the director of strategic initiatives at Backblaze. With over a decade of experience in IT and cloud, Natasha has continuously advocated for customers and how to best help them protect critical data. After graduating from business school in France, Natasha caught the travel bug and she can now be found traveling and swimming in her spare time, frequently in the company of her family and friends.","url":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/author\/natasha\/"}]}},"jetpack_featured_media_url":"https:\/\/backblazeprod.wpenginepowered.com\/wp-content\/uploads\/2019\/06\/Ransomeware_Hero.jpg","_links":{"self":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/91269","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/users\/138"}],"replies":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/comments?post=91269"}],"version-history":[{"count":0,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/posts\/91269\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/media\/91281"}],"wp:attachment":[{"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/media?parent=91269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/categories?post=91269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/backblazeprod.wpenginepowered.com\/blog\/wp-json\/wp\/v2\/tags?post=91269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}