Live data from Hacker News

Danish cloud host says customers ‘lost all data’ after ransomware attack

techcrunch.com

21–30 of 81 posts

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#21
The solution to ransomware? Backups. It's not more complicated than that. It's honestly puzzling that ransomware is the issue it is, crippling entire organizations. It just means they have inept IT teams.

Sucks this Danish cloud host provider didn't back stuff up properly.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#22
Unfortunate turn of events.

I find it really hard to have empathy for serious businesses who don’t have backups and are dependent on a single cloud.

Like for example if you are all in on AWS and do all your backups of your AWS systems to AWS then lose your account. Meh… your fault.

If you run a business then you have an absolute obligation to be able to instantly bring your business back up outside your primary hosting provider.

And if you’ve built all your infrastructure in a way that cannot be replicated outside that hosting provider then frankly that’s negligent.

All those AWS Lambda functions that talk to DynamoDB? Guess what…. none of that can be brought up elsewhere when you lose your AWS account.

If you are a CTO then this is your primary responsibility and priority above everything else. If you are a CTO who has failed to ensure your business can survive losing your cloud then you are a failed CTO.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#23
post #8
post #5

Earlier quoted context omitted.

the 1 in the 3-2-1 should be somewhere on premise or at least not directly reachable from the internet. Think: ssh cron job that copies backups from cloud to cold storage

If the data you’re reading is encrypted, you’re still screwed.

A 3-2-1 backup strategy involves keeping three copies of your data, stored on two different types of media, with one copy kept offsite for disaster recovery.

you are still supposed to have multiple backups =)

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#24
post #6

Yesterday, All those backups seemed a waste of pay. Now my database has gone away. Oh I believe in yesterday. Suddenly, There's not half the files there used to be, And there's a milestone hanging over me The system crashed so suddenly. I pushed something wrong What it was I could not say. Now all my data's gone and I long for yesterday-ay-ay-ay. Yesterday, The need for back-ups seemed so far away. I knew my data was…

Which is why we have the 3-2-1 rule, not only for business but also for personal data: https://www.veeam.com/blog/321-backup-rule.html Otherwise I agree, they are not "backups", just maybe a glorified copy.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#25
post #15

" there was no evidence that customer data was copied out or exfiltrated from its systems" ...after a thorough analysis of the now encrypted logs?

More likely looking at network traffic

Over what time period, though? Did they assume the hackers had only been there since obviously bad things started happening?

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#26

The solution to ransomware? Backups. It's not more complicated than that. It's honestly puzzling that ransomware is the issue it is, crippling entire organizations. It just means they have inept IT teams. Sucks this Danish cloud host provider didn't back stuff up properly.

> It just means they have inept IT teams.

More often than not in my experience is that the IT team wants proper backups but management baulk at the price and never authorize it. Until something bad happens of course.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#27
post #14

I set up an append only storage for a friend recently and his son downloaded some kind of game related cheat thing online and it encrypted his harddrive, his backup usb harddrive, his cloud storage and his NAS. The little restic backup saved him. It pushed one copy of nonsense, but kept several revisions of the old data. On a similar note: does anyone have any experience with mdisc? They seem like the perfect solutio…

I use mdiscs privately as part of the 3-2-1 strategy, also keeping two writer units around and testing (mostly the writers) them like once a year. No issues so far, but the oldest are only about 5 years old...

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#29

Still cloud is better after all. 32GB is enough for all digital device and shooting 8k videos for 1000 centuries. No one should make backups. Storage expansion especially SD card must not be allowed on phone, tablet and laptop. Local storage is not secure and adding sd card to phone will introduce water leak. Meanwhile SIM card slot do not introduce water leak because obviously there is magic. Also SD slot is waste o…

I don't know why you are being downvoted, maybe people don't like the form, but the fact that device manufacturers are removing useful features such as the ability to expand the storage of your device is infuriating.

Re: Danish cloud host says customers ‘lost all data’ after ransomware attack

#30

The solution to ransomware? Backups. It's not more complicated than that. It's honestly puzzling that ransomware is the issue it is, crippling entire organizations. It just means they have inept IT teams. Sucks this Danish cloud host provider didn't back stuff up properly.

> It just means they have inept IT teams. More often than not in my experience is that the IT team wants proper backups but management baulk at the price and never authorize it. Until something bad happens of course.

And when the bad thing happens it's of course the IT team painted as "those guys who kept on bitching also earlier about their jobs"
Post reply on HN