Risks

What can go wrong, and what we do about it

Almost every company that lost data had some backup. The problem was where it lived, who could delete it, or nobody noticing that it had stopped.

Everything in one place

The riskHow it happensHow we solve it

Backup and production at the same providerAn attack on the provider, a datacenter fire or a storage failure hit both at once.The copy sits in another datacenter, run by another company, outside the provider account.

Backup in the same accountWhoever steals the panel password deletes server, snapshot and backup in minutes.A separate login, independent from the provider, with mandatory two-step verification.

Suspended or locked accountA billing dispute, a complaint or a provider mistake cut access to everything.Your data stays within reach in our console, with direct download.

Snapshot treated as backupThe snapshot lives on the same storage as the disk. If the storage fails, both are gone.An independent copy, with daily, weekly, monthly and yearly history.

The backup destination itself failsNo datacenter is immune to fire, power failure or attack, and a single copy is a single point of failure.Replica in another region and another provider: AWS, Oracle Cloud (OCI) or SBA Edge.

Ransomware

The riskHow it happensHow we solve it

The attacker deletes the backup before encryptingDeleting the copies is the first step of an attack, to force the ransom payment.The agent can only send. It never deletes or overwrites anything on the server.

External drive or NAS encrypted alongEverything the infected machine can see on the network is encrypted with it.The copy is off the network and the infected machine cannot reach it.

The sync drive replicates the damageThe encrypted file is synchronized over the good one.Restore points in time: you go back to before the attack.

The breached machine keeps its accessA credential shared between machines cannot be cut without stopping all of them.An individual certificate per machine, revoked at once from the console.

Failures nobody sees

The riskHow it happensHow we solve it

The backup stopped months agoA full disk or a changed password interrupt the routine, and nobody opens the log.Alert by e-mail or webhook when a backup fails or a machine goes past its deadline without a copy.

The backup runs but skips filesA file in use or without permission is left out, and the report only says "completed".A report of what was left out: which folder, how many items and why.

Backup never testedYou only find out the copy is useless on the day you need it.Restore from the console at any time, with a report of the tests performed.

Database copied as a fileThe file of a running database, copied straight from disk, may not open.Dump made by the agent for SQL Server, MySQL, PostgreSQL and Oracle.

People and routine

The riskHow it happensHow we solve it

Someone deletes or overwritesBy mistake or on purpose, and it is only noticed weeks later.History by retention and an audit trail of who did what.

Only one person knows how to restoreThey are on vacation, or gone from the company, on the day of the incident.Web console with administrator, operator and viewer roles.

Stolen laptop, burned serverWithout the machine, the copy that depended on it is stuck.Full disk image and ZIP download without the original machine.

I remember the file name, not the folderSearching point by point, folder by folder, takes hours.Search by name across every restore point at once.

Law and audit

The riskHow it happensHow we solve it

Customer data leaks through the backupA copy in clear text is a second place the data can leave from.Encryption on the machine, before sending. The server stores encrypted blocks.

The audit asks for evidenceSaying the backup exists is not enough; you must prove it runs and restores.Evidence reports and restore test reports.

Data in a country the contract forbidsMany services do not let you choose where the copy lives.You choose the region: Brazil, United States or Europe.

It really happened

OVHcloud, Strasbourg, March 2021

A fire destroyed the SBG2 datacenter in a few hours. Some customers had their contracted backup stored in the same building as the server, and lost both. A French court ordered the provider to pay damages to two of those customers.

Sources: Data Center Dynamics, Blocks & Files

CloudNordic, Denmark, August 2023

Ransomware encrypted the disks of every server and also the provider's primary and secondary backup systems. The company did not pay the ransom and said most customers had lost their data.

Sources: BleepingComputer, The Register

Want to know where your backup is exposed?

Tell us about your environment. In one conversation we show what is already covered and what is missing.

Try free for 30 days

No credit card. 100 GB and 5 machines for 30 days.

WhatsApp+55 11 92201-3261Sales and support, answered by people. Demos, quotes and urgent restores.

Mon–Fri · 8am to 6pm (BRT)

Salescontato@e-backup.cloudQuotes, MSP partnerships and questions before you sign up.

reply within one business day

Back to home