30 days of backups, and every one was already infected

30 days of backups, and every one was already infected

Law firm hit by ransomware that sat dormant for 6 weeks before detonating. They had 30 daily backups — but the malware was baked into all of them. Restoring any backup just re-armed the bomb. The clean copy was day 47. They didn't keep one.

They rebuilt from paper files and email. 5 weeks of billable time lost.

Short retention is a trap against slow ransomware. 7 daily snapshots won't save you. Keep monthlies. Fight me in the comments.