Cyber resilience

in the age of
ransomware
How seven Druva customers defend
against ransomware attacks with
multi-layered data protection

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 Ransomware — you can minimize the impact

Ransomware is attacking critical enterprise data as frequently as every 15 Druva ransomware protection and recovery
seconds. And, on average, enterprises end up paying almost $2M per attack1 in features help:

total costs. The malware is increasingly sophisticated, going beyond encrypting Defend your business and workforce
data and deleting backups to extracting copies — presenting untold risks. against data loss — Druva improves your
information security posture with faster
Yet a multi-layered Data Protection-as-a-Service solution can effectively defend risk mitigations. It prevents the spread
of ransomware within minutes of
against data loss, and fast, reliable data recovery eliminates any reason to even identification.
think of paying a ransom. Druva’s cyber resilience features help organizations
Ensure a robust data isolation architecture
protect, detect, respond, and recover from malicious attacks by restoring — Druva recovers data quickly and flexibly
pristine, air-gapped snapshots of workloads and VMs in minutes. from air-gapped point-in-time snapshots of
blocks and files.
This eBook shows how several companies in diverse sectors rely on Druva to Automate response and recovery
transform ransomware into a minor interruption instead of a devastating ordeal. processes — Druva lets you respond
proactively with full visibility into backups.
It alerts you to unusual data activity to
minimize threat contamination and
permeation.
1.
The State of Ransomware 2021, Sophos, April 2021

© Copyright 2021 | Druva Inc. | druva.com

© Copyright 2021 | Druva,Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 Billion-dollar construction firm
fully recovers from ransomware
Employing thousands working from remote offices across North America, this company handles diverse
projects, all of which involve voluminous amounts of data. Uninterrupted access to this data is critical for
day-to-day construction activities.

The challenge The solution Highlights

The firm supported 50+ remote offices, with most
storing data in on-premises file servers. The costs
of protecting its virtual environments and physical
machines in remote sites escalated significantly
and required multiple complex solutions. To be
ready for inevitable ransomware attacks, the firm
wanted centralized visibility of all backups, secure
offsite storage, and fast, streamlined restores of
pristine data.
After a proof of concept (POC), the firm deployed
Druva for the visibility, flexibility, and cloud-native
data protection it needed for about one-third the
price of its previous solutions. A ransomware attack
in early 2020 exploited a vulnerability and
compromised the entire network within an hour.
Druva stepped up with both network and AWS
Snowball Edge devices (for low bandwidth servers)
to get the firm quickly back in business.
● Restored data on 40+ file servers to meet
faster RTO/RPOs
● Reduced data protection costs by two-thirds
● Protected SaaS data from day one
● Deduplicated for 2.5x storage savings
within hours

Read case study

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 Thirteen protects Microsoft 365 data from
accidental deletion and ransomware
Thirteen is a landlord and housing developer based in Northeast England. It manages 34,000 properties from
North Tyneside to York. The company is a social-purpose business that provides quality homes and support
for those in need of housing, and its 1,500 employees serve more than 70,000 customers.

The challenge The solution Highlights

Thirteen began its cloud journey with Microsoft
365 for closer collaboration and the large-scale
storage of business-critical — and often
government-mandated — data. However, Thirteen
relied on Microsoft’s out-of-the-box features for
data recovery and was at significant risk of
irrecoverable data loss. Without secure backups in
place, Thirteen was vulnerable to accidental
deletion, platform disruption, and ransomware,
among other threats.
The top priority for enabling data recovery in case of
ransomware at Thirteen was cloud-native
capabilities, and Druva backed up everything in
Microsoft 365 seamlessly — including Teams and
SharePoint sites. Because Druva is built on AWS,
Thirteen could completely separate its Microsoft
data hosted on Azure from its backups, fulfilling the
3-2-1 rule for secure backups: two backups on
different media and one independent backup offsite.
● 100% of Microsoft 365 data is accessible
and pristine for ransomware recovery
● 95% faster data restores for all
Microsoft 365 data
● Compliance with GDPR regulations and
complete “right to be forgotten” requests
in minutes

Read case study

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 Anglo-Eastern strengthens cyber resilience
for SaaS productivity solutions
Anglo-Eastern is a leading global provider of ship management services, working with shipowners and clients
for over 40 years. They are committed and engaged in ship and crew management and technical services for
all types and sizes of ships.

The challenge The solution Highlights

Understanding the need to embrace cloud
technology, Anglo-Eastern moved its collaboration
platform to Microsoft 365 for its 1,800
employees, many of whom were mobile and
frequently traveling. Anglo-Eastern ran its
infrastructure on VMware in co-located data
centers. Its traditional on-premises backup was
inadequate for protecting against ransomware
losses, and recovery processes were far too slow
and complex.
Anglo-Eastern chose Druva to increase cyber
resilience against ransomware by ensuring the ready
availability of a pristine, offsite backup. It also
accelerated their cloud adoption and reduced the
cost and complexity of managing cloud files and data
backups. Druva eliminated the need for on-premises
storage, and thanks to its integration with Microsoft
Azure Active Directory, it only took one day to get
all 1,800 users onto the Druva platform.
● All Microsoft 365 data protected from
ransomware loss
● 10x less time spent managing Microsoft
365 data backups for 1,800 users
● 2x reduction in IT administrator time
required to manage backups

Read case study

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 Vertrax accelerates ransomware response and
recovery for endpoints, Microsoft 365 data
Vertrax is a leading provider of supply chain management solutions for bulk oil and gas distribution.
With built-in blockchain, IoT, and AWS integration, Vertrax provides a breadth of solutions and
cloud-native benefits.

The challenge The solution Highlights

Vertrax’s legacy protection worked well until a
ransomware attack encrypted its OneDrive files
and corrupted its on-premises backup files.
Recovery was expensive and complex, and with
the advent of the COVID-19 pandemic, Vertrax IT
wanted their Microsoft 365 data backed up offsite
with endpoint protection, robust disaster
recovery (DR) capabilities, and ransomware
protection within a single solution.
Druva provided a single pane of glass through which
Vertrax’s IT could manage backups and restores of
all its endpoints and Microsoft 365 data, including
Exchange Online, OneDrive, Sharepoint, and Teams.
Its cloud-native backup and recovery meant no
hardware and minimal administration, and Druva’s
ransomware protection leveraged SSO, MFA, and
RBAC to keep data impenetrable from encryption
and attacks.
● 10x faster data restoration
● 4x reduction in the number of consoles
required to manage backup data
● 50% cost savings with Druva
● Easily accessible backups facilitated a
seamless SOX compliance audit

Read case study

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 Langdale Industries deploys a robust disaster
and ransomware recovery strategy
Langdale Industries, Inc. is a holding and parent company of 26 subsidiary companies. The organization’s
centralized administrative and support functions include executive management, industrial relations, legal,
environmental, computer services, treasury, internal auditing, and accounting.

The challenge The solution Highlights

Langdale’s IT is responsible for managing,
maintaining, and securing the IT environments of
all of the company’s subsidiaries, so it oversees
multiple data centers and networks. Their legacy
solution exposed them to accidental deletion,
ransomware, corruption, and device loss or theft,
and they were keen to change their backup
strategy. Effective endpoint protection was
essential.
Druva’s efficient cloud-based storage is secured
● 60X faster endpoint recovery
off-premises, immutable, and delivered as a service.
It was exactly what Langdale had been searching for. ● 90% fewer hours per week spent
Global, source-based deduplication and automated managing backups
storage tiering minimized costs, and Druva’s flexible
recovery options for files, VMs, and cloud workloads ● 24X global deduplication storage savings
were fast and efficient. They gained robust DR,
protection for all endpoints, and ransomware
protection all in one.

Read case study

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 SG360° goes cloud-first for ransomware protection,
tripling recovery speeds and slashing costs
SG360° is a full spectrum direct-to-mail producer specializing in delivering direct marketing communications
that drive engagement and increase response rates. The company creates connected experiences that are
touched, shared, and remembered.

The challenge The solution Highlights

SG360° was growing quickly with mergers and
acquisitions, and its multiple on-premises storage
and backup solutions couldn’t keep up with
hundreds of terabytes of data generated across
many locations. Their capacity planning was nearly
impossible, and they needed an effective way to
respond quickly to ransomware attacks. Only a
cloud-first approach to data protection could
provide the scalability and security SG360°
required.
After launching several proofs of concept (POCs),
● Improved recovery SLAs
Druva was the clear choice. No longer needing to
maintain on-premises infrastructure for backups, ● 3X faster data recovery
they gained back considerable storage for other
needs. Multiple restore options and an easy-to-use ● 10X less time spent managing data
UI made it easy to find files or entire volumes and backups
pull them down to any location. Druva was also, ● 3.7X global deduplication storage savings
by far, the most cost-effective solution.

Read case study

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 Policy Services keeps server, NAS, and
cloud workload data safe from ransomware
Policy Services is a family-run independent financial adviser in Linlithgow, Scotland. They deliver a wide
variety of services to financial advisers and policyholders including online access to account information,
administrative services, and market advice.

The challenge The solution Highlights

Policy Services’ entire technology infrastructure
runs 24x7 and maintains a solid brand reputation
for the company, its 3,000 advisers, and the
400,000+ clients they manage. Their 3.5TB of data
backups had to be pristine and quickly
recoverable in the event of a disaster such as
ransomware. Manual, nightly backups of physical
Linux and NAS file servers and recovery processes
were time-consuming and inefficient.
To protect against ransomware with stringent
recovery time objectives (RTO) and recovery point
objectives (RPO) and to manage significant data
growth, the Policy Services team needed to migrate
their data protection to a cloud-native solution.
Druva, as a 100% SaaS platform built on AWS,
maintained pristine backups of all their critical data
and was implemented with virtually no setup
overhead.
● 95% faster time to restore email and
inboxes
● GDPR compliance and ransomware
protection
● Significant reductions in hardware rentals
● Streamlined, automated backups and
restores

Read case study

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 What makes Druva’s ransomware recovery
solution different
Unlike on-premises or Windows-based solutions that may be vulnerable to ransomware, Druva’s cloud-native architecture protects
data and speeds up recovery. Druva offers:

Air-gapped, immutable backups
● Backups stored off-site in a different
account not connected to your network
● Object-based storage prevents encryption
of backup data
● Malware-resistant architecture prevents
ransomware from executing
Unusual data activity and user access
insights
● Identify backup anomalies with
entropy-based ML
● Monitor admin and API access to backups
● Feed data and alerts to SIEM and
SOAR tools
Malware scanning and federated search
● Prevent reinfection from contaminated
snapshots
● Use built-in malware scanning or your
own IOCs
● Find and delete files across all backups
with federated search

Zero-trust security architecture
● MFA and access controls stop
ransomware from using compromised
credentials
● Bastion, VPN, and auto-expiring
credentials
● AES-256 encryption for data in flight
and at rest
Quarantining and deletion of snapshots
● Quarantine or delete infected snapshots
● Stop infection spread and isolate for
forensics
● Built-in integrations with SOAR tools
for automation
Fully managed security operations
● Vulnerability scans with regular patching
and upgrades
● Penetration testing and dedicated SecOps
personnel
● 24*7*365 threat monitoring and response

© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT
 Next steps
The companies highlighted in this eBook chose Druva to ensure cyber
resilience for many reasons. Its multi-layered defense-in-depth, air-gapped
architecture, sensitive data governance, eDiscovery, and ransomware
Find Druva in AWS Marketplace
response and recovery capabilities all keep their data safe and available
anywhere and anytime. Get started

Ransomware’s impact on brand reputation, customer experience, regulatory

compliance, and operations is simply too substantial to risk, and being
security-conscious is no longer enough, nor is having a prevention-only
strategy. Organizations need to implement an automated, foolproof response Sales: +1 888-248-4976 | sales@druva.com

and recovery process that encompasses data, operations, and services. Americas: +1 888-248-4976 Japan: +81-3-6890-8667
Europe: +44 (0) 20-3750-9440 Singapore: +65 3158-4985
India: +91 (0) 20 6726-3300 Australia: +61 1300-312-729
Discover how Druva can help your organization innovate your cyber security Druva® delivers Data Protection and Management for the cloud era.
strategy and enable your business to quickly recover from ransomware attacks. Druva Cloud Platform is built on AWS and offered as-a-Service;
customers drive down costs by up to 50 percent by freeing themselves
from the burden of unnecessary hardware, capacity planning, and

Visit druva.com/use-cases/ransomware to learn more. software management. Druva is trusted by thousands of companies
worldwide, including over 50 of the Fortune 500. Druva is a privately
held company headquartered in Sunnyvale, California, and is funded by
Sequoia Capital, Viking Global Investors, CDPQ, Neuberger Berman,
Tenaya Capital, Riverwood Capital, and Nexus Partners. Visit druva.com
and follow us on LinkedIn, Twitter, and Facebook.
© Copyright 2021 | Druva Inc. | druva.com

RANSOMWARE — WHAT MAKES

BILLION-DOLLAR LANGDALE
YOU CAN MINIMIZE THIRTEEN ANGLO-EASTERN VERTRAX SG360° POLICY SERVICES DRUVA’S SOLUTION NEXT STEPS
CONSTRUCTION FIRM INDUSTRIES
THE IMPACT DIFFERENT