’s client was initially attacked at 1:30am on Friday 21st November, the team who got in that morning were the first to find out around 6am, by which point the majority of the damage was done. On IT received a phone call from their client at 6:15am and had engineers on site within 3 hours. The first thing the engineers on site did was unplug everything, this is crucial during a ransomware attack as these attacks are like spiders and can continue to spread.
After being able to fully assess the situation On IT were able to come up with a solution for their client, which involved a full re build of their environment. The team worked to build and configure servers before driving to the different sites and installing these servers. On top of this the team had to build a new server infrastructure, create new domains and implement new security policies.
After 4 weeks of continuous work the team at On IT are still working hard to re-build the environment. On IT do regular backups themselves for clients and so their client was able to take some of this data back from them. Due to the client not having a back up solution in place all data that was taken is now gone.
Many SME’s believe that they won’t be targeted by a ransomware attack as they don’t believe themselves to be a big enough entity however this is not the case. Ransomware is becoming a much more common attack for medium sized businesses especially those who have increased their brand awareness or gained more publicity recently.