Download PDF
Case Studies > MSP Recovers 85K Files from a Ransomware Attack

MSP Recovers 85K Files from a Ransomware Attack

Technology Category
  • Cybersecurity & Privacy - Endpoint Security
  • Infrastructure as a Service (IaaS) - Backup & Recovery
  • Infrastructure as a Service (IaaS) - Hybrid Cloud
Applicable Industries
  • Construction & Infrastructure
  • Professional Service
Applicable Functions
  • Business Operation
  • Facility Management
Services
  • Cloud Planning, Design & Implementation Services
  • Cybersecurity Services
  • System Integration
The Challenge
For one of MTM Computer Consulting's clients, a property management firm, a well-crafted phishing email bypassed multiple layers of security, including email security, DNS blocking service, and anti-virus software. The email contained a malicious zip file that, once downloaded, began encrypting files on both local and shared resources. The user who downloaded the file was unaware of the encryption process and shut down his laptop, leaving the ransomware to spread unnoticed. The attack compromised a folder containing 85,000 files crucial to the firm's Construction division. The situation was only discovered when another colleague reported issues accessing shared files, prompting MTM President Tim McCoy to investigate and identify the ransomware attack.
About The Customer
MTM Computer Consulting is a California-based managed service provider (MSP) that has been offering a range of backup and disaster recovery (BDR) services to local businesses for the past nine years. The company, led by President Tim McCoy, has extensive experience in various BDR solutions, from traditional tape backups to modern hybrid cloud systems. MTM's clientele includes businesses from diverse sectors, including a property management firm that recently faced a significant ransomware attack. MTM's expertise in data protection and recovery has made it a trusted partner for businesses looking to safeguard their critical data against emerging threats like ransomware.
The Solution
Upon identifying the ransomware attack, Tim McCoy immediately accessed the Datto SIRIS device used by the property management firm for data backups. Utilizing Datto's Instant Virtualization technology, McCoy virtualized the entire server locally on the Datto device. This allowed him to restore the server with the most recent backup data, effectively neutralizing the ransomware and ensuring zero downtime for the client. The rapid restore time was crucial in maintaining client satisfaction and operational continuity. McCoy's swift and effective response not only resolved the immediate crisis but also reinforced the importance of robust backup solutions. Following the incident, McCoy is working on enhancing the firm's cybersecurity policies, particularly around handling zip files, to prevent future occurrences. However, he remains confident in the reliability of Datto's solutions to manage any similar threats that may arise.
Operational Impact
  • The property management firm experienced zero downtime during the ransomware recovery process, thanks to the rapid restore capabilities of Datto's Instant Virtualization technology.
  • MTM Computer Consulting was able to quickly identify and respond to the ransomware attack, demonstrating their expertise in data protection and recovery.
  • The successful recovery of 85,000 critical files reinforced the client's trust in MTM's services and the effectiveness of their backup solutions.
Quantitative Benefit
  • Recovered 85,000 files from the ransomware attack.
  • Achieved zero downtime for the client during the recovery process.

Related Case Studies.

Contact us

Let's talk!

* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.