The backup myth
Most UK businesses have some form of backup in place. Many believe this means they are protected against ransomware and data loss. In reality, a backup is only one part of a genuine cyber resilience posture — and modern ransomware specifically targets backup systems.
The 2024 and 2025 ransomware statistics for UK businesses make sobering reading. The average cost of a ransomware incident — including downtime, recovery costs, reputational damage and potential regulatory fines — is now measured in hundreds of thousands of pounds for mid-market businesses.
What modern ransomware does to backups
Sophisticated ransomware attacks no longer simply encrypt your live data. They first map your environment — including backup systems — and then encrypt everything simultaneously. If your backup is stored on the same network as your live data, it is just as vulnerable. If your backup software uses the same credentials as your live environment, attackers who compromise those credentials compromise your backup too.
What genuine protection looks like
Immutable backups — data that is written once and cannot be modified or deleted, even by an administrator. Modern cloud backup platforms offer this capability.
Air-gapped copies — backup copies that are physically or logically separated from your live environment and cannot be reached by ransomware.
Regular restore testing — a backup that is never tested is not a backup. Most businesses have never run a full restore test.
Defined RTO and RPO — knowing how long you can afford to be down (RTO) and how much data you can afford to lose (RPO) determines the architecture you need.
Endpoint detection and response (EDR) — identifying and containing threats before they can do damage.
How Open Way Technologies can help
Open Way Technologies provides independent backup and DR assessments at no cost. We assess your current posture, identify the most significant gaps, and introduce you to the right managed service provider from our network. Contact us to arrange a free assessment.