A client of mine has ask me to help troubleshoot a Dropbox hack. She says that it was a ransomware attack and that Dropbox wasn't able to help her recover deleted files. I've included a section of the message she got from Dropbox support, but I have a question. I thought that Dropbox had a "rewind" function that could restore an account to previous point in time before a hack occurred. Does this function not apply to a case like this?
Message section:
"Permanently Deleted Data:
On the website, there is an option to permanently delete files that overrides any backups we have. It's included as a feature, as many people and companies must abide by regulations that state they must not possess (or have the means to recreate) certain data at any given time.
As this is the feature that was used, as soon as this action was taken the files were permanently removed from the server.
I'm truly sorry, I'm unable to help you with this restoration, as this data has been purged from our servers.
As you can imagine, regardless of who 'pushes the button', the effect is the same. This is why we place such importance on account security."
