Earlier quoted context omitted.
It’s the minimum standard for any company big enough to employ a CTO.
And smaller companies?
If they can afford a software engineer, then they can afford a disaster recovery strategy.
Danish cloud host says customers ‘lost all data’ after ransomware attack
71–80 of 81 posts
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#72They weren’t just a cloud hosting company, they were also a domain name registrar and provided DNS hosting.
The registry for the .DK TLD has published a page on what to do for those affected: https://punktum.dk/en/faq/if-you-are-a-customer-at-cloudnord...>
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#73Yesterday, All those backups seemed a waste of pay. Now my database has gone away. Oh I believe in yesterday. Suddenly, There's not half the files there used to be, And there's a milestone hanging over me The system crashed so suddenly. I pushed something wrong What it was I could not say. Now all my data's gone and I long for yesterday-ay-ay-ay. Yesterday, The need for back-ups seemed so far away. I knew my data was…
Which is why we have the 3-2-1 rule, not only for business but also for personal data: https://www.veeam.com/blog/321-backup-rule.html Otherwise I agree, they are not "backups", just maybe a glorified copy.
there are stronger backups and there are weaker backups, but as long as the intention is for an informational failsafe, they're all still backups. arbitrarily deciding what forms are "true" or "not true" or a "glorified copy" seems a bit silly to me. the world is just a bit more complex than that
what is a backup if not just a form of copy anyway?
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#74from the google translated page of the provider What happened? It is our best estimate that when servers had to be moved from one data center to another and despite the fact that the machines being moved were protected by both firewall and antivirus, some of the machines were infected before the move, with an infection that had not been actively used in the previous data center, and we had no knowledge that there was…
Can someone ELI5 how just having network access is enough to do such damage?
Were admin interfaces IP whitelisted only (no other auth)?
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#75Shoddy journalism strikes again. How do we know that all data was lost and the notice on the homepage was not uploaded by hackers? "CloudNordic could not be reached for comment." It's a journalist's job to reach either the company or affected customers to verify the facts.
This is how it should be done: https://computersweden.idg.se/2.2683/1.779824/danska-molnfor...
The CEO of CloudNordic confirmed the attack took place and that backups were lost in an interview to Radio4.Dk, as reported by Computer Sweden.
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#76Earlier quoted context omitted.
According to the company the attacker managed to encrypt both the primary and secondary backup systems.
Yes, but as a customer your 3-2-1 strategy should include a backup off that cloud. Not the first time, and won't be the last time a cloud provider has a catastrophic data loss incident. Relying solely on your cloud provider for backups is a risk.
You know that after fire in OVH datacenter, they asked their customers to start their disaster recovery plans - and people asked where is such option in OVH admin menu? Not excusing them, but many customers are completely clueless about backups and data security in general.
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#77I'm wondering what the future holds for this cloud hosting company. How can a company survive such a dramatic loss?
> How can a company survive such a dramatic loss?
It really depends on what SLAs they advertised.
A (national) local hosting company suffered a datacenter fire and lost pretty much all customer data except for billing (which was rebuilt as they were using third party payment processors).
After the fire the company just let people know there were no backups unless bought explicitly, as the terms of service clearly stated.
The company ia still operating (i know because I’m a customer) and not much has happened.
Yeah some customers were screwed, but it was the kind of ignorant customer that gullibility paid 10€/year for hosting (with php execution), database, domain, traffic and then also expected the same service level as something way more expensive. There’s not much around this: you get what you pay for.
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#78" there was no evidence that customer data was copied out or exfiltrated from its systems" ...after a thorough analysis of the now encrypted logs?
I miss slashdot comment ratings. This one was for sure 4 (Funny/Insightful)!
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#79Earlier quoted context omitted.
They do, quite a bit. Just check the number of comments with /s at the end. People sometimes even say "you forgot to put a /s" or the like, in reply to an obviously sarcastic comment.
That's a Reddit thing, not HN. Normally I see stuff downvoted if it has /s.
Somewhat different from I've seen, then.
And a poor choice if true, IMO.
Re: Danish cloud host says customers ‘lost all data’ after ransomware attack
#80Earlier quoted context omitted.
shaming is easy maybe they were backing up their stuff properly, but backups were wiped as well. even if you have some fancy append-only storage someone still has access to it and that access can be misued.
> but backups were wiped as well Then they're not offline backups, are they? I know what you mean but backing up to a network drive with R/W is not a backup, it's a copy.
They could have wiped through other means, e.g. through ipmi. Although I don't think that was the case.
More realistically, it probably boils down to money. I wonder what would be the cost of backing up everything to a competitor's cloud daily, e.g. one PB of data per day. I have no idea how much it even costs to have a 200 gigabit link to another data center.