Ransomware attack, 3 days down. Recovery in under 4 hours.
The challenge
A manufacturing company in Treviso with 45 employees suffered a ransomware attack that encrypted production servers. The outage halted all operations for 3 days: no verified working backup, an unmonitored local NAS as the only coverage, and no EDR protection on endpoints. The downtime cost — in lost production, overtime hours and customer damage — exceeded tens of thousands of euros.
The solution
We completely redesigned the company's IT protection. Acronis Cyber Protect with immutable backup and 4-hour recovery points on all production servers: even in the worst scenario, at most half a day's work is lost. Acronis Advanced Security EDR activated on all Windows endpoints and servers: real-time behavioral detection, automatic blocking of suspicious processes before they can encrypt files. Perimeter firewall with OT/IT network segmentation to isolate production machinery from the administrative network. Quarterly documented and verified restore test.
The results
Recovery time < 4 hours from any future incident
Zero security incidents in the 18 months after activation
Backup verified every 4 hours — no unmonitored NAS
EDR active on 100% of endpoints: behavioral detection 24/7
Quarterly restore test: documented and guaranteed RTO
“We used to have a backup on an unmonitored NAS. Now we sleep soundly.”
The next case study could be yours.
Tell us your challenge. We always start with analysis — no commitment.