--- title: How Ransomware Tried to Take Down One of Our Clients... and Lost description: How Ransomware Tried to Take Down One of Our Clients... and Lost --- ### Search engine Use this form to find things you need on this site Search × [![We're better together.](https://blog.techboston.com/hubfs/Tech_Networks_of_Boston_June2018/Images/Logo_without_motto-copy-web.png)](https://techboston.com) - [About TNB](https://techboston.com/about-tnb/) - [Overview](https://techboston.com/about-tnb/) - [Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Blog](https://techboston.com/about-tnb/blog/) - [Free Resources](https://techboston.com/about-tnb/resources/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Services](https://techboston.com/our-services/services-overview/) - [Overview](https://techboston.com/our-services/services-overview/) - [Integrated Services](https://techboston.com/our-services/integrated/) - [Managed Services](https://techboston.com/our-services/managed-services-2/) - [Project Services](https://techboston.com/our-services/project-services/) - [Case Studies](https://techboston.com/case-studies/) - [Using IT to Increase Productivity and Reduce Costs](https://techboston.com/case-studies/increase-productivity/) - [Updating Technology for Growing Needs](https://techboston.com/case-studies/updating-technology/) - [Shifting to Remote Work in the Midst of a Crisis](https://techboston.com/case-studies/remote-work/) - [Protecting Your Organization in the Wake of Cybercrime](https://techboston.com/case-studies/cybercrime/) - [Integrating Technology for Mission Driven Success](https://techboston.com/case-studies/integrated-technology-success/) - [Events](https://techboston.com/events/) - [Upcoming Events](https://techboston.com/events/) - [Past Roundtable Events](https://techboston.com/past-roundtable-events/) - [TNB’s Dialogue Series on Nonprofit Data and Evaluation](https://techboston.com/about-tnb/blog/best-practices-data-evaluation/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) - [Home](https://techboston.com/) - [About Us](https://techboston.com/about-tnb/) - [2022 Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Blog](https://techboston.com/about-tnb/blog/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Case Studies](https://techboston.com/about-tnb/case-studies/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Events](https://techboston.com/events/) - [Services](https://techboston.com/our-services/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) # How Ransomware Tried to Take Down One of Our Clients... and Lost [Home](https://techboston.com) / How Ransomware Tried to Take Down One of Our Clients... and Lost Return to Previous Page [Tech Tips](https://blog.techboston.com/tag/tech-tips), [Food For Thought](https://blog.techboston.com/tag/food-for-thought), [Community & Client Spotlight](https://blog.techboston.com/tag/community-client-spotlight) ### How Ransomware Tried to Take Down One of Our Clients... and Lost A few weeks ago, one of our clients was hit with a [ransomware](https://en.wikipedia.org/wiki/Ransomware) variant that successfully encrypted all file shares on their primary file server. If you don't already know about ransomware, this means your files could be locked so that you cannot use them, you could be prevented from accessing Windows, and certain apps could be blocked from running. Worst of all, these cybercriminals demand large amounts of money for files to be retrieved. Sounds like a nightmare, right? As ransomware attacks are becoming more common, IT engineers are trained to establish preventative measures to recover from an attack if one was to ever occur.  [Tech Networks](http://www.techboston.com) had been working with our nonprofit client, [Roca Inc.](http://rocainc.org/), for the past two years, reviewing and consistently improving Roca’s security as part of an overall infrastructure upgrade. These [preventative efforts](https://blog.techboston.com/8-it-security-tips-you-need-to-know) ended up paying dividends in this situation. ***So what happened?*** One of Roca’s employees noticed the files on their network drive looked different and were unable to be opened. Upon further investigation, our engineer confirmed that the files were [encrypted](https://en.wikipedia.org/wiki/Encryption) and ransom notes were left in all file folders. Once the ransomware attack was identified, the client organization was able to move forward without panic, as the recovery process was communicated to the Roca employees. Their systems were fully restored within a few hours, with little operational disruption. With a proper backup and disaster recovery plan in place, Roca was able to continue operating without having to pay a hefty ransom fee to the cybercriminals for their files. ***But what about the security features already enabled on machines?*** There are several very effective tools and techniques that can help you address many of the common threats and problems, including firewalls, virus production tools, Internet Content filtering, and more. However, if any of these tools were 100% effective, there would be no security breaches. As soon as a known threat is addressed by these tools, a new one emerges. ***Some preventative measures to keep you safe:*** - Never let any employee's account be set to NEVER EXPIRE, even if they want it this way. - Set password policies to NOT allow previous passwords, and change passwords every three months. - Never send passwords through open email, always use encrypted messages for sensitive information. - Using cellphones for SMS texts can be useful as a “back-channel” communication method during an attack, but this method is also not encrypted and the information relayed could be retrieved by an attacker/eavesdropper. - Always run security updates and make sure the latest patches are installed on your operating system. We hope this story can encourage your organization to employ strict password procedures and security practices, and eventually save you from a hefty payment to a cybercriminal. The ultimate key to beating ransomware is to prevent, not react.  If you would like to discuss how we can help, please [contact us](mailto:sales@techboston.com) or read about our [security service offerings](https://techboston.com/our-services/security-services/). Share Post - - - - - [mailto:?body=https://blog.techboston.com/true-story-ransomware-tried-take-one-clients-lost](mailto:?body=https://blog.techboston.com/true-story-ransomware-tried-take-one-clients-lost) [Previous](https://blog.techboston.com/tnb-re-certified-as-a-b-corporation-wed-like-to-thank-you) [TNB Re-certified as a B Corporation – we'd like to thank YOU!](https://blog.techboston.com/tnb-re-certified-as-a-b-corporation-wed-like-to-thank-you) [Next](https://blog.techboston.com/dont-click-random-google-docs-invite) [Don't Click on that Random Google Docs Invite](https://blog.techboston.com/dont-click-random-google-docs-invite) #### RELATED POSTS Tech Tips [![Training Your Staff on New Tools](https://blog.techboston.com/hs-fs/hubfs/training%20your%20staff.png?width=387&name=training%20your%20staff.png)](https://blog.techboston.com/training-your-staff-on-new-tools) #### Training Your Staff on New Tools July 28, 2022 at 10:26 AM by Veronica Moreno-Nestojko … Tech Tips , IT security [![The Benefits of 24/7 Monitoring and Reporting](https://blog.techboston.com/hs-fs/hubfs/24_7%20monitoring.png?width=387&name=24_7%20monitoring.png)](https://blog.techboston.com/the-benefits-of-24/7-monitoring-and-reporting) #### The Benefits of 24/7 Monitoring and Reporting February 18, 2021 at 04:23 PM by Veronica Moreno-Nestojko … Tech Tips , Uncategorized #### 4 ways your small business can embrace innovation June 12, 2019 at 11:20 AM by Ashley Fontes … Tech Tips , Security awareness [![How Your Nonprofit Can Manage Data Breaches and Minimize Risk](https://blog.techboston.com/hs-fs/hubfs/CyberSecurity.png?width=387&name=CyberSecurity.png)](https://blog.techboston.com/how-your-nonprofit-can-manage-data-breaches-and-minimize-risk) #### How Your Nonprofit Can Manage Data Breaches and Minimize Risk May 17, 2019 at 06:37 PM by Veronica Moreno-Nestojko … ### Leave a Reply [![updatedblogad](https://blog.techboston.com/hs-fs/hubfs/updatedblogad.png?width=312&name=updatedblogad.png)](https://techboston.com/about-tnb/contact-us/)                    ### Contact Us 1 Wadleigh Place South Boston, MA 02127 Phone: 617.269.0299 Fax: 888.527.9333 ### GET UPDATES ### Resources [Server Failure and Recovery](https://techboston.com/resources/server-failure/) [Plan a Successful Email Migration to the Cloud](https://techboston.com/resources/email-migration/) [How to Align Your Staff on Technology Use and Policies](https://techboston.com/resources/technology-policies/) [Data Loss and Recovery: A Guide](https://techboston.com/resources/data-loss-recovery/) [Assess Your IT Needs: Is an MSP Right For You?](https://techboston.com/resources/assess-it/) [IT Audits and Assessments: What Are They Good For?](https://techboston.com/resources/it-audits-assessments/) [The Right Time to Change Your MSP](https://techboston.com/resources/change-msp/) [Privacy Policy](https://techboston.com/privacy-policy/) © 2021 Tech Networks of Boston