radar

ONE Sentinel

securitySecurity/THREATS/HIGH

Why ransomware attacks succeed even when backups exist

sourceBleeping Computer
calendar_todayMay 6, 2026
schedule1 min read
lightbulb

EXECUTIVE SUMMARY

Ransomware's New Tactic: Destroying Backups Before Encryption

Summary

The article discusses how ransomware attacks are succeeding even when backups exist, by targeting and destroying backup systems before encryption. Acronis highlights the vulnerability of backup systems in the face of sophisticated ransomware tactics.

Key Points

  • Ransomware attacks are increasingly targeting backup systems to ensure no recovery path is available.
  • Acronis explains that attackers destroy backups before proceeding with data encryption.
  • This tactic leaves organizations with no option but to consider paying the ransom.
  • The article emphasizes the need for robust backup protection strategies.

Analysis

The article underscores a critical shift in ransomware tactics, where attackers are not just encrypting data but also ensuring that recovery options are eliminated by destroying backups. This approach significantly increases the pressure on organizations to pay ransoms, highlighting the importance of securing backup systems against such threats. It is crucial for IT professionals to recognize this evolving threat landscape and adapt their security measures accordingly.

Conclusion

IT professionals should prioritize the security of backup systems and implement strategies to protect them from being targeted by ransomware. Regularly testing backup integrity and ensuring off-site or immutable backups can mitigate the risk of complete data loss.