{"id":85718,"date":"2026-08-28T08:21:57","date_gmt":"2026-08-28T15:21:57","guid":{"rendered":"https:\/\/drivesaversdatarecovery.com\/?p=85718"},"modified":"2026-08-28T13:29:24","modified_gmt":"2026-08-28T20:29:24","slug":"why-immutable-backups-can-still-be-compromised","status":"publish","type":"post","link":"https:\/\/drivesaversdatarecovery.com\/de-at\/blog\/why-immutable-backups-can-still-be-compromised\/","title":{"rendered":"Why Immutable Backups Can Still Be Compromised"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><div id=\"case-study-image-and-title\" class=\"vc_section blog-header-top-padding vc_custom_1743006484198 wpex-vc-full-width-section wpex-vc-full-width-section--centered wpex-relative wpex-vc_section-has-fill wpex-vc-reset-negative-margin\"><div class=\"vc_row wpb_row vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div class=\"wpb_raw_code wpb_raw_html wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t  <style>\n\n.vcex-video.wpex-bg-black {\n  border-radius: 15px;\n  overflow: hidden;\n}\n\n.vcex-video-inner video {\n  border-radius: 15px;\n}\n\n.case-study-video {\nborder-radius: 15px !important;\n}\n\n.cs-red-heading {\n      color: #EC0912;\nfont-weight: 600;\n    }\n.vcex-heading-inner {\nmargin-bottom:12px;\n}\n        .single-post-title {\n            display: none;\n        }\n    ul.meta {\n       display:none;\n        }\n\n.parent-div {\n  display: flex !important;       \/* Lay the items out in a row by default (desktop) *\/\n  flex-wrap: nowrap !important;   \/* Prevent wrapping on large screens *\/\n}\n\n\/* When the screen is below, say, 768px, wrap and make each child 50% width *\/\n@media (max-width: 768px) {\n  .parent-div {\n    flex-wrap: wrap !important;   \/* Allow wrapping on smaller screens (mobile) *\/\nfont-size: 15px !important;\n  }\n  .parent-div > div {\n    width: 50% !important;        \/* 2 columns (two items per row) *\/\n    box-sizing: border-box !important; \n  }\n.cs-quote-headshot {text-align: center;margin-bottom:13px;}\n.cs-quote-box {\n    margin-left: 30px;\n    margin-right: 30px;\n\n}\n.cs-quote-headshot-image {\nmax-width: 170px;\nmargin-bottom:13px;\nmargin: auto;\n}\n.cs-quote-nametitle {\ntext-align: center !important;\nalign-items: center !important;\n}\n\n}\n\n.cs-main-image-header .wpex-p-30 {\n    padding: 0 !important;\n    padding-left: 3% !important;\npadding-bottom: 3% !important;\n}\n\n.cs-main-image-header .wpex-items-center {\n    align-items: end !important;\n}\n\n@media screen and (max-width: 1300px) {\n    .cs-main-image-header .vcex-ib-content .vcex-ib-title {\n        font-size: 3.5vw !important;\n    }\n\n    .cs-main-image-header .vcex-ib-content .vcex-ib-caption {\n        font-size: 5.5vw !important;\n    }\n}\n\n.cs-main-image-header .vcex-ib-content {\n text-shadow: 0 0 10px #000; \n}\n\n.vc_custom_1743006484198 {\n    margin-top: -10px !important;\n    padding-bottom: 4% !important;\n    background-color: #000000 !important;\n}\n\n.case-study-image-and-title\n{\n    margin-top: -10px !important;\n    padding-bottom: 4% !important;\n    background-color: #000000 !important;\n}\n.blog-header-top-padding\n\n{\n    margin-top: -10px !important;\n    padding-bottom: 4% !important;\n    background-color: #000000 !important;\n}\n  <\/style>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_custom_1764869151897 wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><style>.vcex-image-banner.vcex_6a925edb797ff .vcex-ib-title{color:#fefefe;font-size:57px;font-family:'DM Sans', sans-serif;font-weight:600;}.vcex-image-banner.vcex_6a925edb797ff .vcex-ib-caption{color:#ffffff;font-size:45px;font-family:'DM Sans', sans-serif;font-weight:600;}<\/style><div class=\"vcex-module vcex-image-banner wpex-flex wpex-flex-col wpex-w-100 wpex-justify-center wpex-relative wpex-overflow-hidden wpex-bg-gray-900 wpex-text-white wpex-hover-text-white wpex-text-left wpex-rounded-md vcex-has-img-tag cs-main-image-header vcex_6a925edb797ff\"><img  src=\"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/08\/Why-Immutable-Backups-Can-Still-Be-Compromised-2-1.png\" class=\"vcex-ib-img wpex-block wpex-transition-all wpex-duration-500\" alt=\"\"><div class=\"vcex-ib-content-wrap wpex-w-100 wpex-transition-all wpex-duration-500 wpex-absolute wpex-inset-0 wpex-flex wpex-items-center wpex-p-30\"><div class=\"vcex-ib-content wpex-flex-grow wpex-mr-auto\"><h3 class=\"vcex-ib-title wpex-heading translation-block\">Warum unver\u00e4nderliche Backups<br>trotzdem kompromittiert werden k\u00f6nnen<\/h3><\/div><\/div><\/div><div class=\"vcex-spacing wpex-w-100 wpex-clear\" style=\"height:35px;\"><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#ffffff;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Backups werden bei Ransomware-Angriffen h\u00e4ufig kompromittiert. In einigen von DriveSavers bearbeiteten F\u00e4llen wurde die betroffene Backup-L\u00f6sung als unver\u00e4nderlich beworben.<\/p>\n<p>Unver\u00e4nderliche Backups sind eine g\u00e4ngige Verteidigungsma\u00dfnahme gegen Ransomware, oft kombiniert mit einer physischen Trennung dieser Backups vom Netzwerk (Air-Gapping). Unver\u00e4nderlichkeit garantiert jedoch nicht, dass Daten nach einem Angriff wiederherstellbar sind.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><div id=\"case-study-blurb-and-scenario\" class=\"vc_section vc_custom_1772461320762 wpex-relative\"><div class=\"vc_row wpb_row vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><style>.vcex-heading.vcex_6a925edb7b30e{color:#e31f26;}.vcex-heading.vcex_6a925edb7b30e .vcex-heading-icon{color:#e31f26;}<\/style><h4 class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-h4 wpex-text-left vcex_6a925edb7b30e\"><span class=\"vcex-heading-inner wpex-inline-block\"><span class=\"vcex-heading-icon vcex-heading-icon-left vcex-icon-wrap wpex-mr-10\"><span aria-hidden=\"true\" class=\"fa fa-solid fa-circle-info\"><\/span><\/span>Was ist ein unver\u00e4nderliches Backup?<\/span><\/h4>\n\t<div style=\"color:#6f737e;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Ein unver\u00e4nderliches Backup ist eine Datenkopie, die w\u00e4hrend eines festgelegten Aufbewahrungszeitraums nicht ge\u00e4ndert oder gel\u00f6scht werden kann \u2013 selbst nicht von einem Administrator. Dieses Write-Once-Design macht Unver\u00e4nderlichkeit zu einer g\u00e4ngigen Verteidigungsma\u00dfnahme gegen Ransomware, da Angreifer theoretisch ein Backup, das sie nicht ver\u00e4ndern k\u00f6nnen, auch nicht manipulieren k\u00f6nnen. Unver\u00e4nderlichkeit sch\u00fctzt jedoch nur die Daten selbst, nicht aber die Software und die Zugangsdaten, mit denen sie verwaltet werden.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div id=\"video\" class=\"vc_row wpb_row vc_row-fluid vc_custom_1787935386791 vc_row-o-content-middle vc_row-flex wpex-relative wpex-vc_row-has-fill no-bottom-margins wpex-vc-reset-negative-margin\" style=\"border-color:#000000!important;\"><div class=\"wpb_column vc_column_container vc_col-sm-12\" id=\"video\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><style>.vcex-heading.vcex_6a925edb7c191{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6a925edb7c191{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6a925edb7c191{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6a925edb7c191{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6a925edb7c191{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6a925edb7c191 translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\">Kunden-<strong><span style=\"color: #e31f26\">Fallstudie<\/span><\/strong><\/span><\/div>\n\t<div style=\"color:#6f737e;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Im Oktober 2025 erreichte die Ransomware Akira das Nakivo-Backup-Repository eines Kunden \u2013 eine Plattform, die mit ihrem unver\u00e4nderlichen Speicher beworben wird. Die Nakivo-Backups wurden gel\u00f6scht, w\u00e4hrend die Daten der virtuellen Maschinen auf dem Volume verschl\u00fcsselt wurden.<\/p>\n<p>Das IT-Team des Kunden f\u00fchrte mehrere Tage lang erfolglos Wiederherstellungsprogramme auf dem Volume aus. Zudem kopierte man 15 TB an Produktionsdaten auf denselben Speicherplatz, den die gel\u00f6schten Backups zuvor belegt hatten. Dieser Vorgang \u00fcberschrieb Teile der gel\u00f6schten Backup-Daten.<\/p>\n<p>DriveSavers erstellte Images der Laufwerke und rekonstruierte manuell fehlende BTRFS-Mapping-Informationen, um an Backup-Daten zu gelangen, die das Volume bereits freigegeben hatte. Auf dem priorit\u00e4ren Datenbankserver erreichte die Wiederherstellung allein aus dem Backup-Repository 99,4 Prozent. Durch das Zusammenf\u00fchren der unverschl\u00fcsselten Bereiche der produktiven virtuellen Festplatten mit den Backup-Daten stieg die Erfolgsquote auf 99,91 Prozent.<\/p>\n<p>Ohne die 15 TB an \u00fcberschriebenen Daten w\u00e4re es eine vollst\u00e4ndige Wiederherstellung gewesen.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><div id=\"case-study-solution\" class=\"vc_section wpex-relative\"><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6a925edb7d320{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6a925edb7d320{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6a925edb7d320{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6a925edb7d320{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6a925edb7d320{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6a925edb7d320 translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\">Unver\u00e4nderlich, air-gapped, und <strong><span style=\"color: #e31f26\">wo die jeweiligen Grenzen liegen<\/span><\/strong><\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Unver\u00e4nderlichkeit und Air-Gapping werden oft in einem Atemzug genannt, erf\u00fcllen jedoch unterschiedliche Aufgaben.<\/p>\n<p class=\"translation-block\">Veeam macht <a href=\"https:\/\/www.veeam.com\/blog\/air-gap-vs-immutable-backups-key-differences.html\" target=\"_blank\" rel=\"noopener\">diesen Unterschied<\/a> klar. Ein Air-Gapped-Backup ist vom Netzwerk isoliert, entweder physisch durch Entfernen des Laufwerks oder Trennen der Anschl\u00fcsse, oder digital durch Blockieren des Netzwerkverkehrs zu ihm. Ein unver\u00e4nderliches Backup kann bis zum Ablauf seiner Aufbewahrungsfrist weder ge\u00e4ndert noch gel\u00f6scht werden, doch Unver\u00e4nderlichkeit setzt nicht voraus, dass es offline ist. Es kann weiterhin \u00fcber das Netzwerk erreichbar sein.<\/p>\n<p>Veeam benennt die jeweilige Schwachstelle klar. Die physische Logistik verlangsamt die Wiederherstellung aus einem Air Gap. Unver\u00e4nderliche Backups bleiben \u00fcber das Netzwerk zug\u00e4nglich, was ein Risiko darstellt, wenn die sie umgebenden Kontrollen schwach sind.<\/p>\n<p>Unver\u00e4nderlichkeit verhindert, dass ein Backup ver\u00e4ndert wird. Ein Air Gap verhindert, dass es erreicht werden kann. Eine kompromittierte Verwaltungsebene kann ein Backup, das sie nicht erreichen kann, nicht beeinflussen.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6a925edb7e712{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6a925edb7e712{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6a925edb7e712{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6a925edb7e712{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6a925edb7e712{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6a925edb7e712 translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\">Was Sie <strong><span style=\"color: #e31f26\">jetzt \u00fcberpr\u00fcfen sollten<\/span><\/strong><\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Stellen Sie Ihrem Anbieter eine Frage: Kann ein Administrator mit vollen Rechten die Unver\u00e4nderlichkeitseinstellung auf dieser Plattform au\u00dfer Kraft setzen?<\/p>\n<p>Die Antwort h\u00e4ngt davon ab, wie die Unver\u00e4nderlichkeit implementiert ist. Bei manchen Systemen k\u00f6nnen Benutzer mit ausreichenden Rechten den Schutz au\u00dfer Kraft setzen; bei anderen kann kein Benutzer ihn entfernen, bevor die Aufbewahrungsfrist abgelaufen ist.<\/p>\n<p>Fragen Sie anschlie\u00dfend, wo der Schreibschutz durchgesetzt wird. Unver\u00e4nderlichkeit, die von der Backup-Anwendung implementiert wird, h\u00e4ngt davon ab, dass diese Anwendung vertrauensw\u00fcrdig bleibt. Unver\u00e4nderlichkeit, die auf der Speicherebene durchgesetzt wird \u2013 etwa durch Object Lock bei S3-kompatiblem Speicher oder eine Hardware-Appliance mit WORM-Schutz \u2013, ist nicht allein auf die Backup-Anwendung zur Durchsetzung angewiesen.<\/p>\n<p>Sobald Sie verstanden haben, wie Ihre unver\u00e4nderlichen Backups gesch\u00fctzt sind, ergreifen Sie Ma\u00dfnahmen, um die Infrastruktur um sie herum zu sch\u00fctzen:<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_custom_1777731664853 vc_row-o-equal-height vc_row-flex wpex-relative wpex-vc-has-custom-column-spacing wpex-vc-column-spacing-0px no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-3 wpex-vc_col-has-fill\"><div style=\"border-color:#000000!important;\" class=\"vc_column-inner vc_custom_1777731447846\"><div class=\"wpb_wrapper\"><style>.vcex-heading.vcex_6a925edb7fba0{color:#e31f26;}<\/style><h4 class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-h4 wpex-text-center vcex_6a925edb7fba0\"><span class=\"vcex-heading-inner wpex-inline-block\">Verwaltungsebene h\u00e4rten<\/span><\/h4><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div>\n\t<div style=\"color:#6f737e;text-align:center;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Betreiben Sie die Backup-Konsole mit separaten Zugangsdaten anstelle des Produktionsverzeichnisses, damit eine Kompromittierung der Dom\u00e4ne nicht gleichzeitig die Backups preisgibt. Verlangen Sie eine Multi-Faktor-Authentifizierung f\u00fcr die Konsole.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><div class=\"wpb_column vc_column_container vc_col-sm-3 wpex-vc_col-has-fill\"><div style=\"border-color:#000000!important;\" class=\"vc_column-inner vc_custom_1787855815151\"><div class=\"wpb_wrapper\"><style>.vcex-heading.vcex_6a925edb806d7{color:#e31f26;}<\/style><h4 class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-h4 wpex-text-center vcex_6a925edb806d7\"><span class=\"vcex-heading-inner wpex-inline-block\">Administrativen Zugriff einschr\u00e4nken<\/span><\/h4><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div>\n\t<div style=\"color:#6f737e;letter-spacing:var(--wpex-tracking-normal);text-align:center;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Beschr\u00e4nken Sie die Anzahl der Konten mit vollen Rechten und \u00fcberpr\u00fcfen Sie diesen Zugriff regelm\u00e4\u00dfig.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><div class=\"wpb_column vc_column_container vc_col-sm-3 wpex-vc_col-has-fill\"><div style=\"background-color:#ffffff!important;border-color:#000000!important;\" class=\"vc_column-inner vc_custom_1777731463422\"><div class=\"wpb_wrapper\"><style>.vcex-heading.vcex_6a925edb81216{color:#e31f26;}<\/style><h4 class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-h4 wpex-text-center vcex_6a925edb81216\"><span class=\"vcex-heading-inner wpex-inline-block\">Nach administrativen \u00c4nderungen erneut testen<\/span><\/h4><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div>\n\t<div style=\"color:#6f737e;text-align:center;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>\u00dcberpr\u00fcfen Sie die Unver\u00e4nderlichkeitsrichtlinie jedes Mal, wenn sich der Backup-Administrator \u00e4ndert, anstatt anzunehmen, dass die \u00fcbernommene Konfiguration weiterhin wie beabsichtigt funktioniert.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><div class=\"wpb_column vc_column_container vc_col-sm-3 wpex-vc_col-has-fill\"><div style=\"border-color:#000000!important;\" class=\"vc_column-inner vc_custom_1777731472225\"><div class=\"wpb_wrapper\"><style>.vcex-heading.vcex_6a925edb81d9c{color:#e31f26;}<\/style><h4 class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-h4 wpex-text-center vcex_6a925edb81d9c\"><span class=\"vcex-heading-inner wpex-inline-block\">Backup-Infrastruktur als Ziel testen<\/span><\/h4><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div>\n\t<div style=\"color:#6f737e;text-align:center;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Angreifer nehmen die Wiederherstellungsf\u00e4higkeit ins Visier. Beziehen Sie die Backup-Infrastruktur in Penetrationstests ein, statt sie als au\u00dferhalb der Angriffsfl\u00e4che liegend zu betrachten.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><div id=\"case-study-results\" class=\"vc_section vc_custom_1772464064344 wpex-vc-full-width-section wpex-vc-full-width-section--centered wpex-relative wpex-vc_section-has-fill wpex-vc-reset-negative-margin\"><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6a925edb82faf{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6a925edb82faf{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6a925edb82faf{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6a925edb82faf{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6a925edb82faf{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6a925edb82faf translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\">Was <strong><span style=\"color: #e31f26\">tats\u00e4chlich wiederherstellbar ist<\/span><\/strong><\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p class=\"translation-block\">Laut der Befragung von mehr als 900 leitenden IT-, Sicherheits- und Risikoverantwortlichen ergab Veeams <a href=\"https:\/\/www.veeam.com\/company\/press-release\/veeam-report-reveals-a-market-wide-shift-from-recovery-confidence-to-proven-data-resilience-amid-ransomware-threats-and-ai-adoption.html\" target=\"_blank\" rel=\"noopener\">Data Trust and Resilience Report 2026<\/a>, dass 90 Prozent der Organisationen davon \u00fcberzeugt waren, sich nach einem Cyber-Vorfall wiederherstellen zu k\u00f6nnen. Unter den Befragten, die tats\u00e4chlich einen Ransomware-Vorfall erlebt hatten, konnten nur 28 % alle betroffenen Daten vollst\u00e4ndig wiederherstellen. 44 % stellten weniger als drei Viertel davon wieder her, wodurch erhebliche L\u00fccken entstanden.<\/p>\n<p>Gel\u00f6scht oder verschl\u00fcsselt ist nicht dasselbe wie nicht wiederherstellbar. Wenn DriveSavers einen Ransomware-Datenrettungsauftrag \u00fcbernimmt, beginnt die Arbeit damit, festzustellen, was auf dem Medium noch vorhanden ist und was daraus rekonstruiert werden kann.<\/p>\n<p>Unsere Ingenieure reparieren die strukturellen Sch\u00e4den, die eine Verschl\u00fcsselung an virtuellen Festplatten, Backup-Dateien und Datenbanken verursacht. Wurde bereits ein Entschl\u00fcsselungstool ausgef\u00fchrt und hat es Dateien besch\u00e4digt zur\u00fcckgelassen, k\u00f6nnen wir den entstandenen Schaden m\u00f6glicherweise reparieren. Ist eine virtuelle Festplatte teilweise verschl\u00fcsselt, setzt DriveSavers seine Werkzeuge und Verfahren ein, um Daten aus nicht betroffenen Bereichen zu identifizieren und wiederherzustellen. Wir stellen zudem \u00e4ltere oder nicht betroffene Versionen der Daten wieder her, auch aus Copy-on-Write-Systemen, und durchsuchen alternative Quellen wie B\u00e4nder und Cloud-Ressourcen.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><div class=\"vc_section vc_custom_1772464080847 vc_section-o-content-middle vc_section-flex wpex-vc-full-width-section wpex-vc-full-width-section--centered wpex-relative wpex-vc_section-has-fill wpex-vc-reset-negative-margin\"><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6a925edb84622{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6a925edb84622{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6a925edb84622{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6a925edb84622{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6a925edb84622{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6a925edb84622 translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\">Ihre Wiederherstellungsoptionen <strong><span style=\"color: #e31f26\">sch\u00fctzen<\/span><\/strong><\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Trennen Sie betroffene Ger\u00e4te so schnell wie m\u00f6glich vom Netzwerk. Trennen Sie externe Speichermedien und verhindern Sie, dass betroffene Systeme auf verbundenen Cloud-Speicher zugreifen k\u00f6nnen.<\/p>\n<p>Trennen ist nicht dasselbe wie Herunterfahren. Das Ausschalten eines Ger\u00e4ts kann Beweise l\u00f6schen, die im fl\u00fcchtigen Speicher gespeichert sind. Betrachten Sie dies daher als letztes Mittel, wenn eine Trennung nicht m\u00f6glich ist.<\/p>\n<p>Am wichtigsten ist: Schreiben Sie keine neuen Daten auf einen Speicher, der gel\u00f6schte oder besch\u00e4digte Backups enth\u00e4lt. Das Wiederherstellen von Daten oder die fortgesetzte Nutzung des betroffenen Speichers kann Daten \u00fcberschreiben, die andernfalls wiederherstellbar w\u00e4ren.<\/p>\n<p>Schalten Sie freigegebene Netzwerkressourcen aus und deaktivieren Sie den Fernzugriff auf die infizierten Ger\u00e4te. Bewahren Sie die L\u00f6segeldforderung sowie alle verd\u00e4chtigen E-Mails oder Anh\u00e4nge auf. Rufen Sie uns anschlie\u00dfend an, bevor irgendetwas wiederhergestellt oder neu aufgebaut wird.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6a925edb85a3c{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6a925edb85a3c{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6a925edb85a3c{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6a925edb85a3c{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6a925edb85a3c{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6a925edb85a3c translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\">Wenn das Entschl\u00fcsselungstool <strong><span style=\"color: #e31f26\">nicht zu 100 % erfolgreich ist<\/span><\/strong><\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Auch die Zahlung der geforderten L\u00f6segeldsumme schlie\u00dft diese L\u00fccke nicht. In Veeams Untersuchung aus dem Jahr 2025 gaben 17 Prozent der Organisationen an, ihre Daten trotz Erf\u00fcllung der Forderungen des Angreifers nicht wiedererlangt zu haben.<\/p>\n<p>Entschl\u00fcsselungstools k\u00f6nnen bei gro\u00dfen Dateien wie Datenbanken und Backup-Dateien versagen. Auch eine unvollst\u00e4ndige Verschl\u00fcsselung kann dazu f\u00fchren, dass ein Entschl\u00fcsselungstool versagt. Wird ein Angriff w\u00e4hrend der Verschl\u00fcsselung unterbrochen, kann eine Datei ver\u00e4ndert werden, ohne den vollst\u00e4ndig verschl\u00fcsselten Zustand zu erreichen, den das Entschl\u00fcsselungstool erwartet \u2013 wodurch dieses die Datei nicht wiederherstellen kann.<\/p>\n<p>DriveSavers arbeitet h\u00e4ufig mit Kunden zusammen, die zwar ein Entschl\u00fcsselungstool erhalten haben, aber dennoch eine Datenrettung ben\u00f6tigen, weil das Entschl\u00fcsselungstool ihre Daten nicht wiederherstellen konnte oder Dateien besch\u00e4digt zur\u00fcckgelassen hat.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div id=\"case-study-takeaways\" class=\"vc_section vc_custom_1772464095377 vc_section-o-content-middle vc_section-flex wpex-vc-full-width-section wpex-vc-full-width-section--centered wpex-relative wpex-vc_section-has-fill wpex-vc-reset-negative-margin\"><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6a925edb87063{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6a925edb87063{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6a925edb87063{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6a925edb87063{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6a925edb87063{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6a925edb87063 translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\">Ransomware-Datenrettungsdienste <strong><span style=\"color: #e31f26\">in den Plan aufnehmen<\/span><\/strong><\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Abschreckung und Pr\u00e4vention erhalten die gr\u00f6\u00dfte Aufmerksamkeit, und das zu Recht. Doch Leitlinien zur Reaktion auf Vorf\u00e4lle behandeln Ransomware-Datenrettungsdienste h\u00e4ufig als letztes Mittel, das man erst mitten in der Krise entdeckt, statt es im Voraus einzuplanen.<\/p>\n<p>Der falsche Zeitpunkt f\u00fcr eine Organisation, mit der L\u00f6sungsplanung zu beginnen, ist der, nachdem die Backups bereits ins Visier genommen wurden und die Standard-Wiederherstellungsmethoden gescheitert sind. Bei der Reaktion auf Ransomware ist Zeit entscheidend: Die Feststellung, ob Daten wiederherstellbar sind, kann Stunden oder Tage dauern, w\u00e4hrend Entscheidungen zur Gesch\u00e4ftskontinuit\u00e4t und zu L\u00f6segeldverhandlungen unter Umst\u00e4nden viel schneller getroffen werden m\u00fcssen.<\/p>\n<p>Wer auch immer diese Entscheidungen trifft, steht dabei unter Druck, und im Reaktionsplan sollte bereits ein vertrauensw\u00fcrdiger Datenrettungsdienstleister vorgesehen sein. Wir beobachten, dass Cyberversicherer inzwischen fragen, ob die Daten wiederherstellbar sind, bevor sie \u00fcberhaupt \u00fcber eine L\u00f6segeldzahlung verhandeln. Einen Dienstleister im Voraus zu benennen, kann daher den gesamten Wiederherstellungsprozess beschleunigen.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 70px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_custom_1776873720672 wpex-relative wpex-vc_row-has-fill no-bottom-margins wpex-vc-reset-negative-margin\" style=\"border-color:#000000!important;\"><div class=\"wpb_column vc_column_container vc_col-sm-12 wpex-vc_col-has-fill\"><div class=\"vc_column-inner vc_custom_1760029818507\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1787857055412\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p style=\"text-align: center;\" class=\"translation-block\"><strong>Wenn Ihre Organisation Unterst\u00fctzung dabei ben\u00f6tigt, einzusch\u00e4tzen, ob eine Datenrettung nach einem Angriff m\u00f6glich ist, bieten wir professionelle <a href=\"https:\/\/drivesaversdatarecovery.com\/de-at\/ransomware-data-recovery\/\" target=\"_self\">Ransomware-Datenrettungsdienste<\/a> an, denen Versicherer und Incident-Response-Unternehmen vertrauen.<br> <a href=\"\/de-at\/contact-drivesavers-b2b\/\" target=\"_self\">Kontaktieren Sie DriveSavers<\/a> unter <a href=\"tel:+18882822227\" target=\"_self\">1 (888) 282-2227<\/a>.<br> <\/strong><\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 30px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Warum unver\u00e4nderliche Backups trotzdem kompromittiert werden k\u00f6nnen, wann ein Entschl\u00fcsselungstool Sie nicht retten wird, und wo die Ransomware-Datenrettung ins Spiel kommt.<\/p>","protected":false},"author":53,"featured_media":85747,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"inline_featured_image":false,"footnotes":""},"categories":[264],"tags":[],"post_series":[],"class_list":["post-85718","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","entry","has-media"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.2 (Yoast SEO v28.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Immutable Backups and Ransomware Data Recovery | DriveSavers<\/title>\n<meta name=\"description\" content=\"Why immutable backups can still be compromised, when a decryptor won&#039;t save you, and where ransomware data recovery fits.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/drivesaversdatarecovery.com\/de-at\/blog\/why-immutable-backups-can-still-be-compromised\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why Immutable Backups Can Still Be Compromised\" \/>\n<meta property=\"og:description\" content=\"Why immutable backups can still be compromised, when a decryptor won&#039;t save you, and where ransomware data recovery fits.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/drivesaversdatarecovery.com\/de-at\/blog\/why-immutable-backups-can-still-be-compromised\/\" \/>\n<meta property=\"og:site_name\" content=\"DriveSavers Data Recovery Services\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DriveSavers\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-28T15:21:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-28T20:29:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/08\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Andy Maus\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@drivesavers\" \/>\n<meta name=\"twitter:site\" content=\"@drivesavers\" \/>\n<meta name=\"twitter:label1\" content=\"Verfasst von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andy Maus\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"TechArticle\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/\"},\"author\":{\"name\":\"Andy Maus\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#\\\/schema\\\/person\\\/d294f7f00d1aee169b2910510fa7e092\"},\"headline\":\"Why Immutable Backups Can Still Be Compromised\",\"datePublished\":\"2026-08-28T15:21:57+00:00\",\"dateModified\":\"2026-08-28T20:29:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/\"},\"wordCount\":3024,\"publisher\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png\",\"articleSection\":[\"Blog\"],\"inLanguage\":\"de-AT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/\",\"name\":\"Immutable Backups and Ransomware Data Recovery | DriveSavers\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png\",\"datePublished\":\"2026-08-28T15:21:57+00:00\",\"dateModified\":\"2026-08-28T20:29:24+00:00\",\"description\":\"Why immutable backups can still be compromised, when a decryptor won't save you, and where ransomware data recovery fits.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/#breadcrumb\"},\"inLanguage\":\"de-AT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de-AT\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/#primaryimage\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png\",\"contentUrl\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png\",\"width\":1200,\"height\":627},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/blog\\\/why-immutable-backups-can-still-be-compromised\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"DriveSavers\",\"item\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why Immutable Backups Can Still Be Compromised\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#website\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/\",\"name\":\"DriveSavers Data Recovery Services\",\"description\":\"The Worldwide Leader in Data Recovery\",\"publisher\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de-AT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#organization\",\"name\":\"DriveSavers Data Recovery\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de-AT\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/Logo-01.png\",\"contentUrl\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/Logo-01.png\",\"width\":1092,\"height\":1087,\"caption\":\"DriveSavers Data Recovery\"},\"image\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/DriveSavers\",\"https:\\\/\\\/x.com\\\/drivesavers\",\"https:\\\/\\\/www.instagram.com\\\/drivesavers\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/drivesavers-data-recovery\\\/\",\"https:\\\/\\\/www.pinterest.com\\\/drivesavers\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCBlynLMdFWQgid-Gwm0zJ1A\",\"https:\\\/\\\/en.wikipedia.org\\\/wiki\\\/DriveSavers\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#\\\/schema\\\/person\\\/d294f7f00d1aee169b2910510fa7e092\",\"name\":\"Andy Maus\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de-AT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g\",\"caption\":\"Andy Maus\"},\"description\":\"Andy Maus is Head of Cyber Recovery Services at DriveSavers, leading initiatives that help organizations recover critical data following cyber incidents, ransomware attacks, and other security breaches. He joined DriveSavers in 2023 after more than two years at Arete Incident Response, where he introduced Data Recovery Services to the firm\u2019s restoration portfolio, expanded the technical operations team from 10 to over 70 specialists, and built strategic alliances with SentinelOne, Dell, and Presidio. Earlier, at Ontrack Data Recovery, he oversaw global sales, supporting complex data restorations for clients across 22 countries. With more than three decades in the technology industry\u2014including leadership roles at Dell, Mitel, and Level 3 Communications\u2014Andy brings deep experience in cyber incident response, data recovery methodologies, and large-scale technical operations.\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/de-at\\\/author\\\/andy-maus\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Immutable Backups and Ransomware Data Recovery | DriveSavers","description":"Why immutable backups can still be compromised, when a decryptor won't save you, and where ransomware data recovery fits.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/drivesaversdatarecovery.com\/de-at\/blog\/why-immutable-backups-can-still-be-compromised\/","og_locale":"de_DE","og_type":"article","og_title":"Why Immutable Backups Can Still Be Compromised","og_description":"Why immutable backups can still be compromised, when a decryptor won't save you, and where ransomware data recovery fits.","og_url":"https:\/\/drivesaversdatarecovery.com\/de-at\/blog\/why-immutable-backups-can-still-be-compromised\/","og_site_name":"DriveSavers Data Recovery Services","article_publisher":"https:\/\/www.facebook.com\/DriveSavers","article_published_time":"2026-08-28T15:21:57+00:00","article_modified_time":"2026-08-28T20:29:24+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/08\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png","type":"image\/png"}],"author":"Andy Maus","twitter_card":"summary_large_image","twitter_creator":"@drivesavers","twitter_site":"@drivesavers","twitter_misc":{"Verfasst von":"Andy Maus","Gesch\u00e4tzte Lesezeit":"6 Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"TechArticle","@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/#article","isPartOf":{"@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/"},"author":{"name":"Andy Maus","@id":"https:\/\/drivesaversdatarecovery.com\/#\/schema\/person\/d294f7f00d1aee169b2910510fa7e092"},"headline":"Why Immutable Backups Can Still Be Compromised","datePublished":"2026-08-28T15:21:57+00:00","dateModified":"2026-08-28T20:29:24+00:00","mainEntityOfPage":{"@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/"},"wordCount":3024,"publisher":{"@id":"https:\/\/drivesaversdatarecovery.com\/#organization"},"image":{"@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/#primaryimage"},"thumbnailUrl":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/08\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png","articleSection":["Blog"],"inLanguage":"de-AT"},{"@type":"WebPage","@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/","url":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/","name":"Immutable Backups and Ransomware Data Recovery | DriveSavers","isPartOf":{"@id":"https:\/\/drivesaversdatarecovery.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/#primaryimage"},"image":{"@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/#primaryimage"},"thumbnailUrl":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/08\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png","datePublished":"2026-08-28T15:21:57+00:00","dateModified":"2026-08-28T20:29:24+00:00","description":"Why immutable backups can still be compromised, when a decryptor won't save you, and where ransomware data recovery fits.","breadcrumb":{"@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/#breadcrumb"},"inLanguage":"de-AT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/"]}]},{"@type":"ImageObject","inLanguage":"de-AT","@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/#primaryimage","url":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/08\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png","contentUrl":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/08\/EN-Why-Immutable-Backups-Can-Still-Be-Compromised-3.png","width":1200,"height":627},{"@type":"BreadcrumbList","@id":"https:\/\/drivesaversdatarecovery.com\/blog\/why-immutable-backups-can-still-be-compromised\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"DriveSavers","item":"https:\/\/drivesaversdatarecovery.com\/"},{"@type":"ListItem","position":2,"name":"Why Immutable Backups Can Still Be Compromised"}]},{"@type":"WebSite","@id":"https:\/\/drivesaversdatarecovery.com\/#website","url":"https:\/\/drivesaversdatarecovery.com\/","name":"DriveSavers Datenrettungsdienste","description":"The Worldwide Leader in Data Recovery","publisher":{"@id":"https:\/\/drivesaversdatarecovery.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/drivesaversdatarecovery.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de-AT"},{"@type":"Organization","@id":"https:\/\/drivesaversdatarecovery.com\/#organization","name":"DriveSavers \u00d6sterreich","url":"https:\/\/drivesaversdatarecovery.com\/","logo":{"@type":"ImageObject","inLanguage":"de-AT","@id":"https:\/\/drivesaversdatarecovery.com\/#\/schema\/logo\/image\/","url":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2021\/08\/Logo-01.png","contentUrl":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2021\/08\/Logo-01.png","width":1092,"height":1087,"caption":"DriveSavers Data Recovery"},"image":{"@id":"https:\/\/drivesaversdatarecovery.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DriveSavers","https:\/\/x.com\/drivesavers","https:\/\/www.instagram.com\/drivesavers\/","https:\/\/www.linkedin.com\/company\/drivesavers-data-recovery\/","https:\/\/www.pinterest.com\/drivesavers\/","https:\/\/www.youtube.com\/channel\/UCBlynLMdFWQgid-Gwm0zJ1A","https:\/\/en.wikipedia.org\/wiki\/DriveSavers"]},{"@type":"Person","@id":"https:\/\/drivesaversdatarecovery.com\/#\/schema\/person\/d294f7f00d1aee169b2910510fa7e092","name":"Andy Maus","image":{"@type":"ImageObject","inLanguage":"de-AT","@id":"https:\/\/secure.gravatar.com\/avatar\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g","caption":"Andy Maus"},"description":"Andy Maus ist Leiter der Cyber Recovery Services bei DriveSavers und verantwortet Initiativen zur Wiederherstellung kritischer Daten nach Cybervorf\u00e4llen, Ransomware-Angriffen und anderen Sicherheitsverletzungen. Seit 2023 ist er bei DriveSavers t\u00e4tig, nachdem er zuvor \u00fcber zwei Jahre bei Arete Incident Response gearbeitet hatte. Dort f\u00fchrte er Datenrettungsdienste ein, vergr\u00f6\u00dferte das technische Team von 10 auf \u00fcber 70 Spezialisten und etablierte strategische Partnerschaften mit SentinelOne, Dell und Presidio. Davor leitete er bei Ontrack Data Recovery den weltweiten Vertrieb und unterst\u00fctzte komplexe Datenwiederherstellungen in 22 L\u00e4ndern. Mit \u00fcber drei Jahrzehnten Erfahrung in der Technologiebranche \u2014 darunter F\u00fchrungspositionen bei Dell, Mitel und Level 3 Communications \u2014 bringt Andy umfassendes Fachwissen in den Bereichen Incident Response, Datenrettung und technische Gro\u00dfprojekte mit.","url":"https:\/\/drivesaversdatarecovery.com\/de-at\/author\/andy-maus\/"}]}},"_links":{"self":[{"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/posts\/85718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/comments?post=85718"}],"version-history":[{"count":10,"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/posts\/85718\/revisions"}],"predecessor-version":[{"id":85753,"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/posts\/85718\/revisions\/85753"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/media\/85747"}],"wp:attachment":[{"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/media?parent=85718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/categories?post=85718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/tags?post=85718"},{"taxonomy":"post_series","embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/de-at\/wp-json\/wp\/v2\/post_series?post=85718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}