Ransomware
The Friday the server asks for Bitcoin.
We have walked into offices where backups had not actually been running. Charts, imaging, the book — all one click from a staff inbox away from becoming a hostage note. Dentistry is a target. Shared logins and leftover antivirus are how it gets in.
What we put in place
- On-site backups for a fast restore of the day
- Encrypted offsite copies so a fire or a locked server is not the end
- Daily checks that the job ran — alerts, not a monthly surprise
- A written restore path: who calls whom, what comes up first
The result we care about is boring: backups verify, the office can be back in minutes or hours instead of days, and the doctor is not explaining to patients why everything is on paper. MFA, less sharing of one front-desk password, and mail that isn’t a free-for-all sit next to that.