Danish hosting firms CloudNordic and AzeroCloud have suffered ransomware attacks, causing the loss of the majority of customer data and forcing the hosting providers to shut down all systems, including websites, email, and customer sites.
  • Moonrise2473@feddit.it
    3·
    1 year ago

    What’s the point of primary and secondary backups if they can be accessed with the same credentials on the same network

    • CrateDane@feddit.dk
      1·
      1 year ago

      They weren’t normally on the same network, but were accidentally put on the same network during migration.

    • snaptastic@beehaw.orgEnglish
      0·
      1 year ago

      What’s the correct way to implement it so that it can still be automated? Credentials that can write new backups but not delete existing ones?

      • Haui@discuss.tchncs.deEnglish
        4·
        1 year ago

        I don’t know if it is the „correct“ way but I do it the other way around. I have a server and a backup server. Server user can‘t even see backup server but packs a backup, backup server pulls the data with read only access, main server deletes backup, done.

  • DigitalDilemma@lemmy.ml
    1·
    1 year ago

    I feel really bad for everyone involved - customers and staff. The human cost in this is huge.

    Yes, there’s a lot of criticism of backup strategies here, but I bet most of us who deal with this professionally have knowledge of systems that would also be vulnerable to malicious attack, and that’s only the shortcomings we know about. Audits and pentesting are great, but not infallable and one tiny mistake can expose everything. If we were all as good as we think we are, ransomware wouldn’t be a thing.

    • floofloof@lemmy.caOPEnglish
      1·
      1 year ago

      Sounds like they had all their backups online, instead of keeping offline copies. It’s a reminder that everyone needs at least one backup that isn’t connected to any computer. It’s also a reminder that “the cloud” should not be the only place you keep your data, because hosting providers are targets for this stuff and you don’t know how careful they are.

  • hunt4peas@lemmy.ml
    0·
    1 year ago

    Time and time again, data hosting providers are proving that local backups not connected to the internet are way better than storing in the cloud.