<b>3-2-1 is the floor, not the goal. In 2026 it's already obsolete.</b>

<b>3-2-1 is the floor, not the goal. In 2026 it's already obsolete.</b>
Three copies, two media, one offsite was written before ransomware learned to sit dormant for 90 days, then encrypt your backups before your live data.
The new minimum is 3-2-1-1-0: one of those copies immutable or air-gapped, and zero errors verified by an actual restore.
If your offsite copy uses the same credentials as your live server, attackers already own both.
People bragging about 3-2-1 in 2026 are bragging about wearing a seatbelt in a car with no brakes. Fight me in the comments.