Why Your Backups Might Not Save You When Ransomware Hits
Summary: A Hacker News piece describes a ransomware timeline in which attackers steal credentials on Day 0, move laterally by Day 3, reach domain admin by Day 7, begin targeting backups by Day 10, and trigger encryption on Day 14. The article states that many organizations fail to recover within acceptable timeframes, if at all, because backups are not reliable or cannot be retrieved quickly enough, and that RTO and RPO are rarely achieved during real ransomware incidents.
Key Takeaway: Attackers who reach domain admin treat backup infrastructure as a priority target, so the recovery capability a security leader is counting on is itself inside the blast radius.
Read the original at The Hacker News ↗
- Topics
- Privacy
- Related
- Italy Fines Meta €805 Million Over Facebook's Android Gallery Access Without Explicit Consent Cyber Risks · Nov 15, 2026