FROM RANSOMWARE TO RESILIENCY
They’d previously used multiple backup products: Veeam and Idera, two different server platforms, with the whole
setup replicated in a nearby co-location facility used for disaster recovery. But when the co-lo lease had come
up for renewal, the IT team turned to us. Our backups in the data center locations are immutable, preventing
attackers’ attempts to encrypt or delete them. “If any virtual machine or SQL Server is encrypted in an attack,”
LaFleur says, “we can instantly restore a snapshot to any point in time.”
When the attack hit, the Cohesity data security and management platform was already in place. Spring ISD had stored one immutable copy of virtual machines (VMs) and databases on-premises and another on AWS. The day after the attack, even before school started, the IT team had already restored its Active Directory servers and critical learning servers. Finance and the Student Information Systems were restored within two days. No disruption to learning. No impact on payroll. No ransom paid. The remaining 200 servers—mostly secondary systems—were brought back online in a planned manner.
When the attack hit, the Cohesity data security and management platform was already in place. Spring ISD had stored one immutable copy of virtual machines (VMs) and databases on-premises and another on AWS. The day after the attack, even before school started, the IT team had already restored its Active Directory servers and critical learning servers. Finance and the Student Information Systems were restored within two days. No disruption to learning. No impact on payroll. No ransom paid. The remaining 200 servers—mostly secondary systems—were brought back online in a planned manner.