Child Item

Our files were deleted and we can't rewind them after a malicious ransomware attack.

One of our company computer synchronising my Dropbox has been attacked by ransomware, and all folders and files for my company have been maliciously deleted. However, I cannot find any events related to this deletion or login. These are important teamwork documents and most of them are only stored in dropbox for teamwork purpose. I don't have most of the copy somewhere else.

I have Dropbox Essential plan so there is supposed to be 180days Dropbox rewind for my account, I tried this feature to rewind back to the day before the ransomware attack, but it still comes up empty. How can the cloud documents be deleted completely from Dropbox? We have more than a thousand documents stored and we need recovering them.

The support team seems unable to help with that. The reason we paid for Dropbox is to prevent sudden document loss. Has anyone had a similar situation?

Find more posts tagged with

Restore

LOL

Comments

Mark

Nana112233 wrote:
How can the cloud documents be deleted completely from Dropbox?

My guess is they have not just been deleted but also permanently deleted (which is very common in these sort of attacks) - and if so they are not recoverable via Dropbox.

What does http://www.dropbox.com/events show, is it as you said blank (I know you mentioned it but just for clarity)? If its blank they were permanently deleted as part of the attack. When a file is permanently deleted they, and all references to them, are removed.

Nana112233 wrote:
The reason we paid for Dropbox is to prevent sudden document loss.

Unfortunately Dropbox syncing, which you are using is not a backup tool and really shouldnt be used as one. Its a syncing tool and, as you have discovered, if something happens to its files it replicates everywhere. Also standard backup practice is to have at least 3 copies of files in different places.