Apex Human Capital Management suffered a ransomware attack

[bdufour]

https://krebsonsecurity.com/2019/02/pay ... s-a-payday

likely encrypted their off site backups/replicas, because their DR site was unusable.

[Gostev]

"State-of-the-art disaster recovery plan" based on "mirroring our live system" ?

[bdufour]

you said, you have a state of the art disaster recovery plan. The lie detector test determined that was a lie.

[nitramd]

Backup to tape anyone?

This dovetails nicely into the Veeam video "Tape is (not) dead".

I find the quotes from the article, below, curious.
"The FBI and multiple security firms have advised victims not to pay any ransom demands, as doing so just encourages the attackers and in any case may not result in actually regaining access to encrypted files."

"In practice, however, many cybersecurity consulting firms are quietly urging their customers that paying up is the fastest route back to business-as-usual."

Talk about adding gasoline to the fire.

I wonder if the cybersecurity firms recommend tape backup?

Is there an explicit business opportunity for Veeam here?

[bdufour]

its hard to get a clear understanding of what they had going on at their DR site, i doubt they even know. id imagine, youre not meeting any RPOs as well, with just a 'mirror of your live system,' at the DR site...

tape is certainly not dead, i totally agree there!