{"id":86549,"date":"2026-09-23T12:18:51","date_gmt":"2026-09-23T19:18:51","guid":{"rendered":"https:\/\/drivesaversdatarecovery.com\/?p=86549"},"modified":"2026-09-24T08:50:25","modified_gmt":"2026-09-24T15:50:25","slug":"vmdk-data-recovery-after-an-akira-ransomware-attack","status":"publish","type":"post","link":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/","title":{"rendered":"VMDK Data Recovery After an Akira Ransomware Attack"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><div id=\"case-study-image-and-title\" class=\"vc_section blog-header-top-padding vc_custom_1743006484198 wpex-vc-full-width-section wpex-vc-full-width-section--centered wpex-relative wpex-vc_section-has-fill wpex-vc-reset-negative-margin\"><div class=\"vc_row wpb_row vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div class=\"wpb_raw_code wpb_raw_html wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t  <style>\n\n.vcex-video.wpex-bg-black {\n  border-radius: 15px;\n  overflow: hidden;\n}\n\n.vcex-video-inner video {\n  border-radius: 15px;\n}\n\n.case-study-video {\nborder-radius: 15px !important;\n}\n\n.cs-red-heading {\n      color: #EC0912;\nfont-weight: 600;\n    }\n.vcex-heading-inner {\nmargin-bottom:12px;\n}\n        .single-post-title {\n            display: none;\n        }\n    ul.meta {\n       display:none;\n        }\n\n.parent-div {\n  display: flex !important;       \/* Lay the items out in a row by default (desktop) *\/\n  flex-wrap: nowrap !important;   \/* Prevent wrapping on large screens *\/\n}\n\n\/* When the screen is below, say, 768px, wrap and make each child 50% width *\/\n@media (max-width: 768px) {\n  .parent-div {\n    flex-wrap: wrap !important;   \/* Allow wrapping on smaller screens (mobile) *\/\nfont-size: 15px !important;\n  }\n  .parent-div > div {\n    width: 50% !important;        \/* 2 columns (two items per row) *\/\n    box-sizing: border-box !important; \n  }\n.cs-quote-headshot {text-align: center;margin-bottom:13px;}\n.cs-quote-box {\n    margin-left: 30px;\n    margin-right: 30px;\n\n}\n.cs-quote-headshot-image {\nmax-width: 170px;\nmargin-bottom:13px;\nmargin: auto;\n}\n.cs-quote-nametitle {\ntext-align: center !important;\nalign-items: center !important;\n}\n\n}\n\n.cs-main-image-header .wpex-p-30 {\n    padding: 0 !important;\n    padding-left: 3% !important;\npadding-bottom: 3% !important;\n}\n\n.cs-main-image-header .wpex-items-center {\n    align-items: end !important;\n}\n\n@media screen and (max-width: 1300px) {\n    .cs-main-image-header .vcex-ib-content .vcex-ib-title {\n        font-size: 3.5vw !important;\n    }\n\n    .cs-main-image-header .vcex-ib-content .vcex-ib-caption {\n        font-size: 5.5vw !important;\n    }\n}\n\n.cs-main-image-header .vcex-ib-content {\n text-shadow: 0 0 10px #000; \n}\n\n.vc_custom_1743006484198 {\n    margin-top: -10px !important;\n    padding-bottom: 4% !important;\n    background-color: #000000 !important;\n}\n\n.case-study-image-and-title\n{\n    margin-top: -10px !important;\n    padding-bottom: 4% !important;\n    background-color: #000000 !important;\n}\n.blog-header-top-padding\n\n{\n    margin-top: -10px !important;\n    padding-bottom: 4% !important;\n    background-color: #000000 !important;\n}\n  <\/style>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_custom_1764869151897 wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><style>.vcex-image-banner.vcex_6ab5673194cc2 .vcex-ib-title{color:#fefefe;font-size:57px;font-family:'DM Sans', sans-serif;font-weight:600;}.vcex-image-banner.vcex_6ab5673194cc2 .vcex-ib-caption{color:#ffffff;font-size:45px;font-family:'DM Sans', sans-serif;font-weight:600;}<\/style><div class=\"vcex-module vcex-image-banner wpex-flex wpex-flex-col wpex-w-100 wpex-justify-center wpex-relative wpex-overflow-hidden wpex-bg-gray-900 wpex-text-white wpex-hover-text-white wpex-text-left wpex-rounded-md vcex-has-img-tag cs-main-image-header vcex_6ab5673194cc2\"><img  src=\"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/09\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack-Header-1-1.png\" class=\"vcex-ib-img wpex-block wpex-transition-all wpex-duration-500\" alt=\"\"><div class=\"vcex-ib-content-wrap wpex-w-100 wpex-transition-all wpex-duration-500 wpex-absolute wpex-inset-0 wpex-flex wpex-items-center wpex-p-30\"><div class=\"vcex-ib-content wpex-flex-grow wpex-mr-auto\"><h3 class=\"vcex-ib-title wpex-heading\">R\u00e9cup\u00e9ration de donn\u00e9es VMDK<\/h3><div class=\"vcex-ib-caption wpex-text-lg wpex-last-mb-0\">apr\u00e8s une attaque par le ran\u00e7ongiciel Akira<\/div><\/div><\/div><\/div><div class=\"vcex-spacing wpex-w-100 wpex-clear\" style=\"height:35px;\"><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid parent-div wpex-relative\"><div class=\"wpb_column vc_column_container vc_col-sm-1\/5\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#ffffff;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p class=\"translation-block\">Environnement :<\/strong><br>\n<span style=\"font-size: .8em\">Parc VMware sauvegard\u00e9 par Nakivo sur un Synology RS3621RPXs \u00e0 12 baies, RAID 5, BTRFS<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><div class=\"wpb_column vc_column_container vc_col-sm-1\/5\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#ffffff;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p class=\"translation-block\"><strong>Attaque :<\/strong><br>\n<span style=\"font-size: 0.8em\"><span style=\"font-weight: 400\">Ran\u00e7ongiciel Akira<\/span><\/span><\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><div class=\"wpb_column vc_column_container vc_col-sm-1\/5\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#ffffff;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p class=\"translation-block\"><strong>Donn\u00e9es \u00e0 risque :<\/strong><br>\n<span style=\"font-size: .8em\">Environ 11 To de sauvegardes de machines virtuelles chiffr\u00e9es, le reste ayant \u00e9t\u00e9 supprim\u00e9<\/span><\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><div class=\"wpb_column vc_column_container vc_col-sm-1\/5\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#ffffff;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790182117035\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p class=\"translation-block\"><strong>Complication :<\/strong><br>\n<span style=\"font-size: .8em\">Environ 15 To de donn\u00e9es \u00e9crites sur le m\u00eame volume le lendemain de l'attaque<\/span><\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><div class=\"wpb_column vc_column_container vc_col-sm-1\/5\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#ffffff;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p class=\"translation-block\"><strong>R\u00e9sultat :<\/strong><br>\n<span style=\"font-size: .8em\">99,91 % r\u00e9cup\u00e9r\u00e9 sur le serveur de base de donn\u00e9es prioritaire<\/span><\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#ffffff;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Une organisation d'entreprise multi-sites a subi une attaque par le ran\u00e7ongiciel Akira, laquelle a perturb\u00e9 l'acc\u00e8s \u00e0 des syst\u00e8mes virtualis\u00e9s critiques et expos\u00e9 des pans importants de son environnement de production \u00e0 un risque significatif. Environ 11 To de sauvegardes de machines virtuelles conserv\u00e9es dans le r\u00e9f\u00e9rentiel Nakivo du client ont \u00e9t\u00e9 chiffr\u00e9es. Les sauvegardes restantes ont \u00e9t\u00e9 supprim\u00e9es.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><div id=\"case-study-blurb-and-scenario\" class=\"vc_section vc_custom_1772461320762 wpex-relative\"><div id=\"video\" class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\" id=\"video\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>La m\u00eame attaque a chiffr\u00e9 les machines virtuelles de production, privant l'organisation des donn\u00e9es n\u00e9cessaires au r\u00e9tablissement de ses activit\u00e9s.<\/p>\n<p>En l'espace de quelques jours, l'organisation a fait appel \u00e0 son assureur cyber ainsi qu'\u00e0 un cabinet de r\u00e9ponse aux incidents. Les m\u00e9thodes de restauration classiques ont permis de r\u00e9cup\u00e9rer certaines parties de l'environnement, mais n'ont pas pu restaurer plusieurs machines virtuelles prioritaires. Le cabinet de r\u00e9ponse aux incidents a alors fait appel \u00e0 DriveSavers Data Recovery pour d\u00e9terminer si des donn\u00e9es exploitables pouvaient encore \u00eatre r\u00e9cup\u00e9r\u00e9es \u00e0 partir du support de stockage concern\u00e9, et si les disques des machines virtuelles endommag\u00e9es pouvaient \u00eatre reconstruits.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><div id=\"case-study-solution\" class=\"vc_section wpex-relative\"><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6ab5673198b40{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6ab5673198b40{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6ab5673198b40{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6ab5673198b40{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6ab5673198b40{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6ab5673198b40 translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\">La situation de <strong><span style=\"color: #e31f26\">perte de donn\u00e9es<\/span><\/strong><\/span><\/div>\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Au moment o\u00f9 les disques sont arriv\u00e9s chez DriveSavers, le chiffrement caus\u00e9 par le ran\u00e7ongiciel n'\u00e9tait plus le seul probl\u00e8me en jeu.<\/p>\n<p>L'analyse technique r\u00e9alis\u00e9e \u00e0 l'aide de notre outil propri\u00e9taire de r\u00e9cup\u00e9ration de disques virtuels a permis d'identifier environ 15 To de donn\u00e9es \u00e9crites sur le volume le lendemain de l'attaque, soit apr\u00e8s que les sauvegardes Nakivo avaient d\u00e9j\u00e0 \u00e9t\u00e9 supprim\u00e9es. Ces \u00e9critures se sont r\u00e9v\u00e9l\u00e9es lourdes de cons\u00e9quences.<\/p>\n<p>Supprimer un fichier sur BTRFS n'efface pas son contenu. Les syst\u00e8mes de fichiers de ce type marquent g\u00e9n\u00e9ralement les blocs concern\u00e9s comme disponibles pour une r\u00e9utilisation, tandis que les donn\u00e9es elles-m\u00eames restent en place jusqu'\u00e0 ce que quelque chose soit \u00e9crit par-dessus. Les \u00e9critures effectu\u00e9es apr\u00e8s l'attaque ont \u00e9t\u00e9 affect\u00e9es \u00e0 des blocs qu'occupaient les sauvegardes supprim\u00e9es.<\/p>\n<p>Une analyse technique plus pouss\u00e9e a r\u00e9v\u00e9l\u00e9 qu'une part nettement plus importante des informations cibl\u00e9es, voire potentiellement leur int\u00e9gralit\u00e9, aurait probablement pu \u00eatre r\u00e9cup\u00e9r\u00e9e si le support de stockage concern\u00e9 \u00e9tait rest\u00e9 inchang\u00e9.<\/p>\n<p>Le support arriv\u00e9 chez DriveSavers contenait donc un m\u00e9lange de donn\u00e9es originales intactes, de donn\u00e9es chiffr\u00e9es par le ran\u00e7ongiciel, de donn\u00e9es supprim\u00e9es et r\u00e9attribu\u00e9es, d'informations nouvellement \u00e9crites, de structures de syst\u00e8me de fichiers endommag\u00e9es, ainsi que des blocs partiellement \u00e9cras\u00e9s. Environ 3 600 fichiers, totalisant 16,1 To, sont demeur\u00e9s actifs, dont 99 % \u00e9taient des disques virtuels VMware et des instantan\u00e9s dont l'extension avait \u00e9t\u00e9 r\u00e9\u00e9crite en \u00ab .AKIRA \u00bb.<\/p>\n<p>Une caract\u00e9ristique de l'attaque a jou\u00e9 en faveur d'un r\u00e9sultat plus favorable. L'algorithme de chiffrement utilis\u00e9 lors de cet incident ne chiffrait pas les fichiers dans leur int\u00e9gralit\u00e9. Il chiffrait environ 15 % de chaque fichier, r\u00e9partis en trois bandes, ce qui, sur les VMDK volumineux, se traduisait par un chiffrement d'environ 5 % en t\u00eate de fichier. De vastes portions de chaque disque virtuel sont ainsi demeur\u00e9es intactes. Une analyse au niveau des blocs s'est av\u00e9r\u00e9e n\u00e9cessaire pour identifier ces zones intactes.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><div id=\"case-study-results\" class=\"vc_section vc_custom_1772464064344 wpex-vc-full-width-section wpex-vc-full-width-section--centered wpex-relative wpex-vc_section-has-fill wpex-vc-reset-negative-margin\"><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6ab5673199f74{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6ab5673199f74{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6ab5673199f74{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6ab5673199f74{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6ab5673199f74{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6ab5673199f74\"><span class=\"vcex-heading-inner wpex-inline-block\"><strong><span style=\"color: #e31f26\">The Recovery<\/span><\/strong> Process<\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 20px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid faq-accord-sec vc_custom_1790193320616 vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_tta-container\" data-vc-action=\"collapseAll\"><div class=\"vc_general vc_tta vc_tta-accordion vc_tta-color-grey vc_tta-style-total vc_tta-shape-rounded vc_tta-o-shape-group vc_tta-controls-align-default vc_tta-o-all-clickable  accord-column vc_custom_1746707767615\"><div class=\"vc_tta-panels-container\"><div class=\"vc_tta-panels\"><div class=\"vc_tta-panel vc_active faq-accord-title\" id=\"1716890254482-90592e71-20fa\" data-vc-content=\".vc_tta-panel-body\"><div class=\"vc_tta-panel-heading\"><h4 class=\"vc_tta-panel-title vc_tta-controls-icon-position-right\"><a href=\"#1716890254482-90592e71-20fa\" data-vc-accordion data-vc-container=\".vc_tta-container\"><span class=\"vc_tta-title-text\">R\u00e9cup\u00e9ration \u00e0 distance \u00e9valu\u00e9e puis \u00e9cart\u00e9e<\/span><i class=\"vc_tta-controls-icon vc_tta-controls-icon-chevron\"><\/i><\/a><\/h4><\/div><div class=\"vc_tta-panel-body\"><div class=\"vc_row wpb_row vc_inner vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790193004599\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Une \u00e9valuation \u00e0 distance a permis de confirmer l'\u00e9tendue du projet et de d\u00e9terminer si la r\u00e9cup\u00e9ration pouvait \u00eatre men\u00e9e \u00e0 bien \u00e0 distance ou n\u00e9cessitait un travail en laboratoire. R\u00e9cup\u00e9rer ces donn\u00e9es impliquait de lire l'ensemble des douze disques au niveau des secteurs, y compris les zones que le syst\u00e8me de fichiers ne r\u00e9f\u00e9ren\u00e7ait plus ; or, un acc\u00e8s \u00e0 distance \u00e0 un NAS en fonctionnement atteint g\u00e9n\u00e9ralement le volume logique plut\u00f4t que le support physique sous-jacent. La r\u00e9cup\u00e9ration \u00e0 distance s'est donc r\u00e9v\u00e9l\u00e9e impossible. Un ing\u00e9nieur a r\u00e9cup\u00e9r\u00e9 les disques \u00e0 l'a\u00e9roport international de San Francisco le dimanche soir suivant.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"vc_tta-panel\" id=\"1716980310195-cf5120dd-63bf\" data-vc-content=\".vc_tta-panel-body\"><div class=\"vc_tta-panel-heading\"><h4 class=\"vc_tta-panel-title vc_tta-controls-icon-position-right\"><a href=\"#1716980310195-cf5120dd-63bf\" data-vc-accordion data-vc-container=\".vc_tta-container\"><span class=\"vc_tta-title-text\">Aucune op\u00e9ration de r\u00e9cup\u00e9ration de donn\u00e9es effectu\u00e9e sur les disques d'origine<\/span><i class=\"vc_tta-controls-icon vc_tta-controls-icon-chevron\"><\/i><\/a><\/h4><\/div><div class=\"vc_tta-panel-body\"><div class=\"vc_row wpb_row vc_inner vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790193010867\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Les douze disques ont tous \u00e9t\u00e9 imag\u00e9s dans les 24 heures suivant leur arriv\u00e9e, et chaque op\u00e9ration ult\u00e9rieure a \u00e9t\u00e9 ex\u00e9cut\u00e9e sur ces images. Les supports d'origine sont demeur\u00e9s tels que re\u00e7us tout au long du processus, ce qui a permis de pr\u00e9server l'\u00e9tat des preuves pendant que l'analyse se poursuivait.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"vc_tta-panel\" id=\"1716892470635-67dc37f4-23f5\" data-vc-content=\".vc_tta-panel-body\"><div class=\"vc_tta-panel-heading\"><h4 class=\"vc_tta-panel-title vc_tta-controls-icon-position-right\"><a href=\"#1716892470635-67dc37f4-23f5\" data-vc-accordion data-vc-container=\".vc_tta-container\"><span class=\"vc_tta-title-text\">Extraction men\u00e9e en parall\u00e8le<\/span><i class=\"vc_tta-controls-icon vc_tta-controls-icon-chevron\"><\/i><\/a><\/h4><\/div><div class=\"vc_tta-panel-body\"><div class=\"vc_row wpb_row vc_inner vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790193018704\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Analyser environ 120 To une image \u00e0 la fois n'aurait pas \u00e9t\u00e9 viable. Les ing\u00e9nieurs ont divis\u00e9 le travail en tranches d'un t\u00e9raoctet et ont lanc\u00e9 dix analyses simultan\u00e9ment, ce qui a permis d'atteindre les limites de d\u00e9bit du mat\u00e9riel lui-m\u00eame. Un second jeu d'images a ensuite \u00e9t\u00e9 constitu\u00e9 sur un second syst\u00e8me, afin que les extractions puissent se d\u00e9rouler simultan\u00e9ment sur les deux machines.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"vc_tta-panel\" id=\"1716892533584-1defe13c-967c\" data-vc-content=\".vc_tta-panel-body\"><div class=\"vc_tta-panel-heading\"><h4 class=\"vc_tta-panel-title vc_tta-controls-icon-position-right\"><a href=\"#1716892533584-1defe13c-967c\" data-vc-accordion data-vc-container=\".vc_tta-container\"><span class=\"vc_tta-title-text\">La carte d'allocation du syst\u00e8me de fichiers a n\u00e9cessit\u00e9 une reconstruction manuelle<\/span><i class=\"vc_tta-controls-icon vc_tta-controls-icon-chevron\"><\/i><\/a><\/h4><\/div><div class=\"vc_tta-panel-body\"><div class=\"vc_row wpb_row vc_inner vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790193024841\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>\u00c0 mesure que les donn\u00e9es \u00e9taient supprim\u00e9es, BTRFS avait commenc\u00e9 \u00e0 effacer la couche qui associe les donn\u00e9es stock\u00e9es \u00e0 leurs emplacements physiques. Environ 7 To de cette carte ont \u00e9t\u00e9 affect\u00e9s, produisant des r\u00e9sultats inutilisables \u00e0 partir d'un support par ailleurs lisible. Les ing\u00e9nieurs ont d\u00e9termin\u00e9 que les zones concern\u00e9es avaient \u00e9t\u00e9 allou\u00e9es de fa\u00e7on contigu\u00eb avant la suppression, ce qui a rendu possible une reconstruction manuelle. La reconstitution manuelle de la carte a permis de r\u00e9tablir l'acc\u00e8s \u00e0 environ 5 To de donn\u00e9es de sauvegarde que le syst\u00e8me de fichiers avait d\u00e9j\u00e0 lib\u00e9r\u00e9es.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"vc_tta-panel\" id=\"1746706790263-0ece488a-c88d\" data-vc-content=\".vc_tta-panel-body\"><div class=\"vc_tta-panel-heading\"><h4 class=\"vc_tta-panel-title vc_tta-controls-icon-position-right\"><a href=\"#1746706790263-0ece488a-c88d\" data-vc-accordion data-vc-container=\".vc_tta-container\"><span class=\"vc_tta-title-text\">Disques virtuels analys\u00e9s au niveau des blocs<\/span><i class=\"vc_tta-controls-icon vc_tta-controls-icon-chevron\"><\/i><\/a><\/h4><\/div><div class=\"vc_tta-panel-body\"><div class=\"vc_row wpb_row vc_inner vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790193030834\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Un fichier VMDK endommag\u00e9 est rarement simplement lisible ou illisible. Les ing\u00e9nieurs ont s\u00e9par\u00e9 les zones intactes de celles qui \u00e9taient chiffr\u00e9es, corrompues, partiellement \u00e9cras\u00e9es ou structurellement endommag\u00e9es. Les trois machines les plus prioritaires comportaient chacune cinq ou six points de restauration, le plus r\u00e9cent ayant \u00e9t\u00e9 pris peu avant l'attaque, pour un total de 35 fichiers VMDK. Les dommages affectaient 3 \u00e0 5 % de chacun de ces fichiers. Sur l'une des trois machines, le chiffreur n'avait absolument pas atteint les fichiers de disque virtuel.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"vc_tta-panel\" id=\"1746706820873-e77dbc09-0a20\" data-vc-content=\".vc_tta-panel-body\"><div class=\"vc_tta-panel-heading\"><h4 class=\"vc_tta-panel-title vc_tta-controls-icon-position-right\"><a href=\"#1746706820873-e77dbc09-0a20\" data-vc-accordion data-vc-container=\".vc_tta-container\"><span class=\"vc_tta-title-text\">Combler les lacunes \u00e0 partir des donn\u00e9es de production comportait des risques<\/span><i class=\"vc_tta-controls-icon vc_tta-controls-icon-chevron\"><\/i><\/a><\/h4><\/div><div class=\"vc_tta-panel-body\"><div class=\"vc_row wpb_row vc_inner vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790193036872\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Lorsque les donn\u00e9es de sauvegarde \u00e0 elles seules ne couvraient pas un jeu de donn\u00e9es, les ing\u00e9nieurs ont int\u00e9gr\u00e9 les zones non chiffr\u00e9es des disques virtuels de production. Cette approche s'est r\u00e9v\u00e9l\u00e9e efficace, bien qu'elle ait exig\u00e9 une grande prudence. Deux des trois machines prioritaires comportaient \u00e9galement des fichiers d'instantan\u00e9s, qui n'entretiennent pas de relation biunivoque avec les donn\u00e9es qu'ils repr\u00e9sentent. Les structures faisant correspondre les fichiers d'instantan\u00e9s aux donn\u00e9es qu'ils repr\u00e9sentaient se trouvaient dans les zones chiffr\u00e9es. Utiliser les disques virtuels de production pour combler les lacunes risquait donc d'introduire des donn\u00e9es plus anciennes et de provoquer une corruption difficile \u00e0 retracer par la suite. Les ing\u00e9nieurs ont \u00e9valu\u00e9 le risque propre \u00e0 chaque jeu de donn\u00e9es plut\u00f4t que de proc\u00e9der \u00e0 une fusion syst\u00e9matique.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><div class=\"vc_tta-panel\" id=\"1790012399261-c4054605-890c\" data-vc-content=\".vc_tta-panel-body\"><div class=\"vc_tta-panel-heading\"><h4 class=\"vc_tta-panel-title vc_tta-controls-icon-position-right\"><a href=\"#1790012399261-c4054605-890c\" data-vc-accordion data-vc-container=\".vc_tta-container\"><span class=\"vc_tta-title-text\">Livraison adapt\u00e9e \u00e0 l'environnement cible<\/span><i class=\"vc_tta-controls-icon vc_tta-controls-icon-chevron\"><\/i><\/a><\/h4><\/div><div class=\"vc_tta-panel-body\"><div class=\"vc_row wpb_row vc_inner vc_row-fluid wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790193043155\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>DriveSavers a collabor\u00e9 avec le cabinet de r\u00e9ponse aux incidents et le client pour d\u00e9terminer \u00e0 l'avance dans quel environnement les disques seraient r\u00e9import\u00e9s. Les donn\u00e9es extraites au niveau des fichiers ont d'abord \u00e9t\u00e9 restitu\u00e9es via le r\u00e9seau, ce qui a permis au client d'acc\u00e9der \u00e0 des fichiers sp\u00e9cifiques pendant que le reste des travaux se poursuivait. Les fichiers VMDK complets, pr\u00eats \u00e0 \u00eatre r\u00e9import\u00e9s, ont suivi.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class=\"vc_section vc_custom_1772464080847 vc_section-o-content-middle vc_section-flex wpex-vc-full-width-section wpex-vc-full-width-section--centered wpex-relative wpex-vc_section-has-fill wpex-vc-reset-negative-margin\"><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_row wpb_row vc_inner vc_row-fluid wpex-relative\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><\/div><\/div><\/div><\/div><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6ab567319f64c{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6ab567319f64c{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6ab567319f64c{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6ab567319f64c{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6ab567319f64c{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6ab567319f64c translation-block\"><span class=\"vcex-heading-inner wpex-inline-block\"><strong><span style=\"color: #e31f26\">R\u00e9sultats : 99,91 %<\/span><\/strong> sur le serveur de base de donn\u00e9es prioritaire<\/span><\/div><div class=\"vc_empty_space\"   style=\"height: 10px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><div id=\"TABLE-ROW\" class=\"vc_row wpb_row vc_inner vc_row-fluid vc_custom_1790193294209 wpex-relative\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div class=\"wpb_raw_code wpb_raw_html wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<!-- ===================== RecoverNow Dataset\/Result Table ===================== -->\n<!-- Paste this entire block into a WPBakery \"Raw HTML\" element.            -->\n\n<div class=\"rnptds-wrap\">\n  <div class=\"rnptds-table\" id=\"rnptdsTable\">\n\n    <!-- HEADER ROW -->\n    <div class=\"rnptds-row rnptds-header-row\">\n      <div class=\"rnptds-cell rnptds-head\">Ensemble de donn\u00e9es<\/div>\n      <div class=\"rnptds-cell rnptds-head\">R\u00e9sultat<\/div>\n    <\/div>\n\n    <div class=\"rnptds-row rnptds-shade\">\n      <div class=\"rnptds-cell rnptds-label\">VMDK du serveur de base de donn\u00e9es prioritaire, \u00e0 partir du r\u00e9f\u00e9rentiel de sauvegarde seul<\/div>\n      <div class=\"rnptds-cell rnptds-value\">99,4 % r\u00e9cup\u00e9r\u00e9<\/div>\n    <\/div>\n\n    <div class=\"rnptds-row\">\n      <div class=\"rnptds-cell rnptds-label\">Les m\u00eames VMDK, apr\u00e8s fusion des zones de disque virtuel de production<\/div>\n      <div class=\"rnptds-cell rnptds-value\">99,91 % r\u00e9cup\u00e9r\u00e9<\/div>\n    <\/div>\n\n    <div class=\"rnptds-row rnptds-shade\">\n      <div class=\"rnptds-cell rnptds-label\">Fichier de vidage de base de donn\u00e9es de 10 Go, livr\u00e9<\/div>\n      <div class=\"rnptds-cell rnptds-value\">99,88 % r\u00e9cup\u00e9r\u00e9<\/div>\n    <\/div>\n\n    <div class=\"rnptds-row\">\n      <div class=\"rnptds-cell rnptds-label\">Ensemble de donn\u00e9es Hyper Backup, 3,12 To r\u00e9partis sur 763 384 fichiers<\/div>\n      <div class=\"rnptds-cell rnptds-value\">3,03 To intacts, 86,74 Go endommag\u00e9s<\/div>\n    <\/div>\n\n  <\/div>\n<\/div>\n\n<style>\n  .rnptds-wrap {\n    --rnptds-line: #7a7a7a;\n    --rnptds-red: #E31F26;\n    --rnptds-label: #6F737E;\n    width: 100%;\n    overflow-x: auto;\n    -webkit-overflow-scrolling: touch;\n    box-sizing: border-box;\n    font-family: \"DM Sans\", sans-serif;\n  }\n  .rnptds-wrap * { box-sizing: border-box; }\n\n  .rnptds-table {\n    display: table;\n    width: 100%;\n    min-width: 500px;\n    border-collapse: separate;\n    border-spacing: 0;\n    border: 1px solid var(--rnptds-line);\n    border-radius: 15px;\n    overflow: hidden;\n  }\n\n  .rnptds-row {\n    display: table-row;\n  }\n\n  .rnptds-cell {\n    display: table-cell;\n    vertical-align: middle;\n    padding: 14px 18px;\n    border-bottom: 1px solid var(--rnptds-line);\n    border-right: 1px solid var(--rnptds-line);\n    text-align: left;\n    font-size: 18px;\n    font-family: \"DM Sans\", sans-serif;\n    background: transparent;\n  }\n\n  .rnptds-cell:last-child { border-right: none; }\n  .rnptds-row:last-child .rnptds-cell { border-bottom: none; }\n\n  .rnptds-cell:first-child { width: 62%; }\n\n  .rnptds-label { color: var(--rnptds-label); font-weight: 500; }\n  .rnptds-value { color: var(--rnptds-label); font-weight: 600; }\n\n  .rnptds-head {\n    background: transparent;\n    font-size: 20px;\n    font-weight: 700;\n    color: #e31f26;\n  }\n<\/style>\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 20px\"><span class=\"vc_empty_space_inner\"><\/span><\/div>\n\t<div style=\"color:#6f737e;font-size:18px;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>DriveSavers a men\u00e9 la mission sous la forme de sept sous-missions distinctes, dont le p\u00e9rim\u00e8tre \u00e9tait clairement d\u00e9limit\u00e9, avec plusieurs ing\u00e9nieurs travaillant en parall\u00e8le, afin que les syst\u00e8mes les plus prioritaires puissent \u00eatre trait\u00e9s et restitu\u00e9s avant le reste de l'environnement.<\/p>\n<p>DriveSavers a pr\u00e9cis\u00e9 tout au long de la mission, tant au cabinet de r\u00e9ponse aux incidents qu'au client, que rien ne garantissait le d\u00e9marrage des fichiers VMDK reconstruits. Au moins une machine virtuelle r\u00e9cup\u00e9r\u00e9e a effectivement d\u00e9marr\u00e9. Les autres ont \u00e9t\u00e9 restitu\u00e9es sous forme de donn\u00e9es r\u00e9cup\u00e9r\u00e9es et de disques r\u00e9par\u00e9s.<\/p>\n<p>Chaque disque virtuel r\u00e9par\u00e9 \u00e9tait accompagn\u00e9 d'un rapport au niveau des blocs indiquant pr\u00e9cis\u00e9ment quelles zones du disque \u00e9taient saines et lesquelles pr\u00e9sentaient des dommages irr\u00e9cup\u00e9rables, avec un d\u00e9compte des objets, fichiers, r\u00e9pertoires et octets pour chacune. Pour les \u00e9quipes techniques charg\u00e9es de reconstruire un environnement, ce type de rapport fournit des informations consid\u00e9rablement plus d\u00e9taill\u00e9es qu'une simple mention \u00ab r\u00e9cup\u00e9r\u00e9 \u00bb ou \u00ab non r\u00e9cup\u00e9r\u00e9 \u00bb. Il permet aux administrateurs d'\u00e9valuer la qualit\u00e9 d'une image r\u00e9cup\u00e9r\u00e9e et de d\u00e9terminer si une r\u00e9cup\u00e9ration suppl\u00e9mentaire au niveau des applications, une extraction de fichiers ou une reconstruction s'av\u00e8rent n\u00e9cessaires.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<div class=\"vc_empty_space\"   style=\"height: 20px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><div style=\"border-color:#000000!important;\" class=\"vc_row wpb_row vc_inner vc_row-fluid vc_custom_1790186340921 vc_row-o-content-middle vc_row-flex wpex-relative wpex-vc_row-has-fill wpex-vc-reset-negative-margin\"><div class=\"wpb_column vc_column_container vc_col-sm-12 vc_col-xs-4\"><div class=\"vc_column-inner vc_custom_1727284399200\"><div class=\"wpb_wrapper\"><style>.vcex-icon-box.vcex_6ab56731a16df .vcex-icon-box-content{color:#6f737e;}.vcex-icon-box.vcex_6ab56731a16df .vcex-icon-box-icon{color:#ec0912;}<\/style><div class=\"vcex-module vcex-icon-box vcex-icon-box-one wpex-flex wpex-text-left vc_custom_1790186401531 vcex_6ab56731a16df\"><div class=\"vcex-icon-box-symbol vcex-icon-box-symbol--icon wpex-flex-shrink-0 wpex-mr-20\"><div class=\"vcex-icon-box-icon wpex-items-center wpex-justify-center wpex-child-inherit-color wpex-text-center wpex-leading-none wpex-flex wpex-text-1\"><span class=\"wpex-flex wpex-icon--w wpex-icon wpex-icon--bidi\" aria-hidden=\"true\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewbox=\"0 0 448 512\"><path d=\"M0 216C0 149.7 53.7 96 120 96h8c17.7 0 32 14.3 32 32s-14.3 32-32 32h-8c-30.9 0-56 25.1-56 56v8h64c35.3 0 64 28.7 64 64v64c0 35.3-28.7 64-64 64H64c-35.3 0-64-28.7-64-64V320 288 216zm256 0c0-66.3 53.7-120 120-120h8c17.7 0 32 14.3 32 32s-14.3 32-32 32h-8c-30.9 0-56 25.1-56 56v8h64c35.3 0 64 28.7 64 64v64c0 35.3-28.7 64-64 64H320c-35.3 0-64-28.7-64-64V320 288 216z\"\/><\/svg><\/span><\/div><\/div><div class=\"vcex-icon-box-text wpex-flex-grow\"><div class=\"vcex-icon-box-content wpex-last-mb-0 wpex-clr\"><p><em>Veuillez transmettre \u00e0 toute l'\u00e9quipe toute ma reconnaissance pour l'aide apport\u00e9e par chacun sur ce projet.<\/em><\/p>\n<p style=\"text-align: right\">\u2014 Directeur des syst\u00e8mes d'information, organisation cliente<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><div id=\"case-study-takeaways\" class=\"vc_section vc_custom_1772464095377 vc_section-o-content-middle vc_section-flex wpex-vc-full-width-section wpex-vc-full-width-section--centered wpex-relative wpex-vc_section-has-fill wpex-vc-reset-negative-margin\"><div class=\"vc_row wpb_row vc_row-fluid vc_row-o-content-middle vc_row-flex wpex-relative no-bottom-margins\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\"><div class=\"vc_empty_space\"   style=\"height: 40px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><style>.vcex-heading.vcex_6ab56731a2a77{color:#3e3d3e;font-size:35px;font-weight:400;}@media (max-width:1024px){.vcex-heading.vcex_6ab56731a2a77{font-size:25px;}}@media (max-width:959px){.vcex-heading.vcex_6ab56731a2a77{font-size:25px;}}@media (max-width:767px){.vcex-heading.vcex_6ab56731a2a77{font-size:25px;}}@media (max-width:479px){.vcex-heading.vcex_6ab56731a2a77{font-size:25px;}}<\/style><div class=\"vcex-heading vcex-heading-plain vcex-module wpex-heading wpex-text-2xl wpex-div vcex_6ab56731a2a77\"><span class=\"vcex-heading-inner wpex-inline-block\"><strong><span style=\"color: #e31f26\">Conclusion<\/span><\/strong><\/span><\/div>\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p>Lorsqu'une application de sauvegarde ne parvient pas \u00e0 mener \u00e0 bien une restauration, les donn\u00e9es sous-jacentes peuvent malgr\u00e9 tout \u00eatre encore pr\u00e9sentes sur le support de stockage. Ce r\u00e9f\u00e9rentiel avait \u00e9t\u00e9 chiffr\u00e9, vid\u00e9, puis \u00e9cras\u00e9 avant m\u00eame d'\u00eatre confi\u00e9 \u00e0 un sp\u00e9cialiste de la r\u00e9cup\u00e9ration, et la reconstruction au niveau des blocs a n\u00e9anmoins permis de restituer les syst\u00e8mes dont l'entreprise avait le plus besoin.<\/p>\n<p>R\u00e9cup\u00e9rer des donn\u00e9es de machines virtuelles dans de telles conditions exige des connaissances sp\u00e9cialis\u00e9es, des outils propri\u00e9taires, ainsi qu'un d\u00e9veloppement sur mesure adapt\u00e9 au syst\u00e8me de fichiers sp\u00e9cifique concern\u00e9. Lorsqu'un ran\u00e7ongiciel frappe simultan\u00e9ment les syst\u00e8mes de production et l'infrastructure de sauvegarde, la r\u00e9cup\u00e9ration sp\u00e9cialis\u00e9e de donn\u00e9es apr\u00e8s ran\u00e7ongiciel peut offrir une voie technique l\u00e0 o\u00f9 la restauration classique \u00e9choue.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<div class=\"vc_empty_space\"   style=\"height: 20px\"><span class=\"vc_empty_space_inner\"><\/span><\/div><\/div><\/div><\/div><\/div><div class=\"vc_row wpb_row vc_row-fluid vc_custom_1776873720672 wpex-relative wpex-vc_row-has-fill no-bottom-margins wpex-vc-reset-negative-margin\" style=\"border-color:#000000!important;\"><div class=\"wpb_column vc_column_container vc_col-sm-12 wpex-vc_col-has-fill\"><div class=\"vc_column-inner vc_custom_1760029818507\"><div class=\"wpb_wrapper\">\n\t<div style=\"color:#6f737e;\" class=\"wpb_text_column has-custom-color wpex-child-inherit-color wpb_content_element vc_custom_1790194379795\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<p style=\"text-align: center;\" class=\"translation-block\"><strong>Vous \u00eates confront\u00e9 \u00e0 une situation similaire ? <a href=\"\/fr-fr\/contact\/\" target=\"_self\">Contactez DriveSavers<\/a> au <a href=\"tel:+18882822227\" target=\"_self\">1 (888) 282-2227<\/a>.<\/strong><\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>DriveSavers a r\u00e9cup\u00e9r\u00e9 99,91 % d'un serveur de base de donn\u00e9es critique apr\u00e8s que le ran\u00e7ongiciel Akira a chiffr\u00e9 puis supprim\u00e9 11 To de sauvegardes VMware sur un NAS Synology.<\/p>","protected":false},"author":53,"featured_media":86585,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"inline_featured_image":false,"footnotes":""},"categories":[10559],"tags":[11458],"post_series":[],"class_list":["post-86549","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-case-studies","tag-crypto","entry","has-media"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.2 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>VMDK Data Recovery After an Akira Ransomware Attack<\/title>\n<meta name=\"description\" content=\"DriveSavers recovered 99.91% of a critical database server after Akira ransomware encrypted and deleted 11TB of VMware backups on a Synology NAS.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/drivesaversdatarecovery.com\/fr-fr\/etudes-de-cas\/vmdk-data-recovery-after-an-akira-ransomware-attack\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"VMDK Data Recovery After an Akira Ransomware Attack\" \/>\n<meta property=\"og:description\" content=\"DriveSavers recovered 99.91% of a critical database server after Akira ransomware encrypted and deleted 11TB of VMware backups on a Synology NAS.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/drivesaversdatarecovery.com\/fr-fr\/etudes-de-cas\/vmdk-data-recovery-after-an-akira-ransomware-attack\/\" \/>\n<meta property=\"og:site_name\" content=\"DriveSavers Data Recovery Services\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/DriveSavers\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-23T19:18:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-24T15:50:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/09\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Andy Maus\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@drivesavers\" \/>\n<meta name=\"twitter:site\" content=\"@drivesavers\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andy Maus\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"TechArticle\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/\"},\"author\":{\"name\":\"Andy Maus\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#\\\/schema\\\/person\\\/d294f7f00d1aee169b2910510fa7e092\"},\"headline\":\"VMDK Data Recovery After an Akira Ransomware Attack\",\"datePublished\":\"2026-09-23T19:18:51+00:00\",\"dateModified\":\"2026-09-24T15:50:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/\"},\"wordCount\":3149,\"publisher\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png\",\"keywords\":[\"crypto\"],\"articleSection\":[\"Case Studies\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/\",\"name\":\"VMDK Data Recovery After an Akira Ransomware Attack\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png\",\"datePublished\":\"2026-09-23T19:18:51+00:00\",\"dateModified\":\"2026-09-24T15:50:25+00:00\",\"description\":\"DriveSavers recovered 99.91% of a critical database server after Akira ransomware encrypted and deleted 11TB of VMware backups on a Synology NAS.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/#primaryimage\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png\",\"contentUrl\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png\",\"width\":1200,\"height\":627},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/case-studies\\\/vmdk-data-recovery-after-an-akira-ransomware-attack\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"DriveSavers\",\"item\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"VMDK Data Recovery After an Akira Ransomware Attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#website\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/\",\"name\":\"DriveSavers Data Recovery Services\",\"description\":\"The Worldwide Leader in Data Recovery\",\"publisher\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#organization\",\"name\":\"DriveSavers Data Recovery\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/Logo-01.png\",\"contentUrl\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/wp-content\\\/uploads\\\/2021\\\/08\\\/Logo-01.png\",\"width\":1092,\"height\":1087,\"caption\":\"DriveSavers Data Recovery\"},\"image\":{\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/DriveSavers\",\"https:\\\/\\\/x.com\\\/drivesavers\",\"https:\\\/\\\/www.instagram.com\\\/drivesavers\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/drivesavers-data-recovery\\\/\",\"https:\\\/\\\/www.pinterest.com\\\/drivesavers\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCBlynLMdFWQgid-Gwm0zJ1A\",\"https:\\\/\\\/en.wikipedia.org\\\/wiki\\\/DriveSavers\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/#\\\/schema\\\/person\\\/d294f7f00d1aee169b2910510fa7e092\",\"name\":\"Andy Maus\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g\",\"caption\":\"Andy Maus\"},\"description\":\"Andy Maus is Strategic Partnerships &amp; Cyber Recovery Services Leader at DriveSavers, leading initiatives that help organizations recover critical data following cyber incidents, ransomware attacks, and other security breaches. He joined DriveSavers in 2023 after more than two years at Arete Incident Response, where he introduced Data Recovery Services to the firm\u2019s restoration portfolio, expanded the technical operations team from 10 to over 70 specialists, and built strategic alliances with SentinelOne, Dell, and Presidio. Earlier, at Ontrack Data Recovery, he oversaw global sales, supporting complex data restorations for clients across 22 countries. With more than three decades in the technology industry\u2014including leadership roles at Dell, Mitel, and Level 3 Communications\u2014Andy brings deep experience in cyber incident response, data recovery methodologies, and large-scale technical operations.\",\"url\":\"https:\\\/\\\/drivesaversdatarecovery.com\\\/fr-fr\\\/author\\\/andy-maus\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"VMDK Data Recovery After an Akira Ransomware Attack","description":"DriveSavers a r\u00e9cup\u00e9r\u00e9 99,91 % d'un serveur de base de donn\u00e9es critique apr\u00e8s que le ran\u00e7ongiciel Akira a chiffr\u00e9 puis supprim\u00e9 11 To de sauvegardes VMware sur un NAS Synology.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/etudes-de-cas\/vmdk-data-recovery-after-an-akira-ransomware-attack\/","og_locale":"fr_FR","og_type":"article","og_title":"VMDK Data Recovery After an Akira Ransomware Attack","og_description":"DriveSavers recovered 99.91% of a critical database server after Akira ransomware encrypted and deleted 11TB of VMware backups on a Synology NAS.","og_url":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/etudes-de-cas\/vmdk-data-recovery-after-an-akira-ransomware-attack\/","og_site_name":"DriveSavers Data Recovery Services","article_publisher":"https:\/\/www.facebook.com\/DriveSavers","article_published_time":"2026-09-23T19:18:51+00:00","article_modified_time":"2026-09-24T15:50:25+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/09\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png","type":"image\/png"}],"author":"Andy Maus","twitter_card":"summary_large_image","twitter_creator":"@drivesavers","twitter_site":"@drivesavers","twitter_misc":{"\u00c9crit par":"Andy Maus","Dur\u00e9e de lecture estim\u00e9e":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"TechArticle","@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/#article","isPartOf":{"@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/"},"author":{"name":"Andy Maus","@id":"https:\/\/drivesaversdatarecovery.com\/#\/schema\/person\/d294f7f00d1aee169b2910510fa7e092"},"headline":"VMDK Data Recovery After an Akira Ransomware Attack","datePublished":"2026-09-23T19:18:51+00:00","dateModified":"2026-09-24T15:50:25+00:00","mainEntityOfPage":{"@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/"},"wordCount":3149,"publisher":{"@id":"https:\/\/drivesaversdatarecovery.com\/#organization"},"image":{"@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/09\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png","keywords":["crypto"],"articleSection":["Case Studies"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/","url":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/","name":"VMDK Data Recovery After an Akira Ransomware Attack","isPartOf":{"@id":"https:\/\/drivesaversdatarecovery.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/#primaryimage"},"image":{"@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/09\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png","datePublished":"2026-09-23T19:18:51+00:00","dateModified":"2026-09-24T15:50:25+00:00","description":"DriveSavers a r\u00e9cup\u00e9r\u00e9 99,91 % d'un serveur de base de donn\u00e9es critique apr\u00e8s que le ran\u00e7ongiciel Akira a chiffr\u00e9 puis supprim\u00e9 11 To de sauvegardes VMware sur un NAS Synology.","breadcrumb":{"@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/#primaryimage","url":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/09\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png","contentUrl":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2026\/09\/VMDK-Data-Recovery-After-an-Akira-Ransomware-Attack1.png","width":1200,"height":627},{"@type":"BreadcrumbList","@id":"https:\/\/drivesaversdatarecovery.com\/case-studies\/vmdk-data-recovery-after-an-akira-ransomware-attack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"DriveSavers","item":"https:\/\/drivesaversdatarecovery.com\/"},{"@type":"ListItem","position":2,"name":"VMDK Data Recovery After an Akira Ransomware Attack"}]},{"@type":"WebSite","@id":"https:\/\/drivesaversdatarecovery.com\/#website","url":"https:\/\/drivesaversdatarecovery.com\/","name":"Services de r\u00e9cup\u00e9ration de donn\u00e9es DriveSavers","description":"Le leader mondial de la r\u00e9cup\u00e9ration de donn\u00e9es","publisher":{"@id":"https:\/\/drivesaversdatarecovery.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/drivesaversdatarecovery.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/drivesaversdatarecovery.com\/#organization","name":"DriveSavers France","url":"https:\/\/drivesaversdatarecovery.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/drivesaversdatarecovery.com\/#\/schema\/logo\/image\/","url":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2021\/08\/Logo-01.png","contentUrl":"https:\/\/drivesaversdatarecovery.com\/wp-content\/uploads\/2021\/08\/Logo-01.png","width":1092,"height":1087,"caption":"DriveSavers Data Recovery"},"image":{"@id":"https:\/\/drivesaversdatarecovery.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/DriveSavers","https:\/\/x.com\/drivesavers","https:\/\/www.instagram.com\/drivesavers\/","https:\/\/www.linkedin.com\/company\/drivesavers-data-recovery\/","https:\/\/www.pinterest.com\/drivesavers\/","https:\/\/www.youtube.com\/channel\/UCBlynLMdFWQgid-Gwm0zJ1A","https:\/\/en.wikipedia.org\/wiki\/DriveSavers"]},{"@type":"Person","@id":"https:\/\/drivesaversdatarecovery.com\/#\/schema\/person\/d294f7f00d1aee169b2910510fa7e092","name":"Andy Maus","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d40862266d842cfd428c105a72654611de2d431617d5cf0d86aca1087aef2cd0?s=96&d=blank&r=g","caption":"Andy Maus"},"description":"Andy Maus is Strategic Partnerships &amp; Cyber Recovery Services Leader at DriveSavers, leading initiatives that help organizations recover critical data following cyber incidents, ransomware attacks, and other security breaches. He joined DriveSavers in 2023 after more than two years at Arete Incident Response, where he introduced Data Recovery Services to the firm\u2019s restoration portfolio, expanded the technical operations team from 10 to over 70 specialists, and built strategic alliances with SentinelOne, Dell, and Presidio. Earlier, at Ontrack Data Recovery, he oversaw global sales, supporting complex data restorations for clients across 22 countries. With more than three decades in the technology industry\u2014including leadership roles at Dell, Mitel, and Level 3 Communications\u2014Andy brings deep experience in cyber incident response, data recovery methodologies, and large-scale technical operations.","url":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/author\/andy-maus\/"}]}},"_links":{"self":[{"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/posts\/86549","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/comments?post=86549"}],"version-history":[{"count":10,"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/posts\/86549\/revisions"}],"predecessor-version":[{"id":86586,"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/posts\/86549\/revisions\/86586"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/media\/86585"}],"wp:attachment":[{"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/media?parent=86549"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/categories?post=86549"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/tags?post=86549"},{"taxonomy":"post_series","embeddable":true,"href":"https:\/\/drivesaversdatarecovery.com\/fr-fr\/wp-json\/wp\/v2\/post_series?post=86549"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}