Site taken down by ransomware

[Paul F.]

numbered wrote:
[quote=Paul F]
A local school discovered that hard way that if the backup drive is connected in any way to the affected server, it gets encrypted too.

Are schools a regular target? I have not heard many school examples...
Any server with open ports and an accessible IP address that is sloppily protected can be a target.

My impression from the other schools tech was this was something of a "target of opportunity". In this case, some security features were turned "off" by a tech from the SIS vendor who was troubleshooting, and they were not turned back "on" by the local tech by mistake..... a few weeks went by, and one morning there's this message on the screen.