We signed up a new Epicor customer to do an upgrade analysis last week. Services to be performed 8/15.
Get a call Monday to postpone the meeting. They got hit with a new breed of ransomware that uses reverse IP tracing to figure out who their victim is and they price the unlock based on that. This customer had a particularly bad backup process in which their backup files were mounted on NAS's on the network so the ransomware not only encrypted their files but also all their backups. Their only possible usable backup is a test system that was created on 5/31 for a loss of 2 months of data.
This is a 300 employee company with 65 concurrent ERP users...
The ransomware fee was set at $100,000 with it increasing $100k every day not paid. Currently its at $400k and they aren't going to pay.
It also took out all their office documents and even their email system. The only thing besides the 5/31 ERP system copy left intact was their CAD drawings.
Please, please do your customers a solid and review their backup procedures. I'm not going to post a link here to our real time protection solution due to group rules but feel free to message me for more info on something that can 100% prevent this stuff.