At a glance
- Mechanical contractor entity
- 22 users impacted
- Compromised data, network and server infrastructure
- No cyber insurance
- Six-figure ransom
- NetWalker ransomware, data extortion and exfiltration
Before Alvaka
- Business operations halted
- Recovery resources exhausted
- Internal IT staff fighting two fronts - security and rebuilding systems
0% No systems were recovered
After Alvaka
- Ready to implement solution in 24 hours
- Converted environment to hyper-converged network
100% Fully recovered in 7 weeks
Share this Post
Facebook
LinkedIn
Twitter X
Emergency Services Designed for the Rapid Recovery of Your Business!
Overview
A mechanical and contractor services company in the Midwest with 200 endpoints required assistance in recovering network and server infrastructure that was compromised by NetWalker ransomware and involved data exfiltration. The company did not have the necessary expertise to successfully remediate its environment. Alvaka was selected to provide emergency services, which are available 24/7/365 and can adapt to your needs.
Challenges
Threat actors utilized NetWalker ransomware and data exfiltration methods to infiltrate the organization’s network and server infrastructure to encrypt crucial data necessary for operations. The internal IT staff was underfunded and working with aged systems that had existing errors. Furthermore, the entity did not have cyber insurance and the entire operation of recovery was self-funded.
Although the scale of the project was overwhelming to the internal IT team, efforts to recover the environment proceeded. As a result, the unorganized IT infrastructure and procedures exhausted the resources necessary to remediate the situation.
After thorough consideration, the IT staff concluded that recovery efforts would be unsuccessful due to the lack of expertise in rebuilding systems in-house, and that assistance was necessary.
The Midwest entity found and selected Alvaka to provide a solution via an experienced team. Alvaka’s ability to be available 24/7/365 with consistency and bring resources on-site stood out during the decisionmaking process.
Although the scale of the project was overwhelming to the internal IT team, efforts to recover the environment proceeded. As a result, the unorganized IT infrastructure and procedures exhausted the resources necessary to remediate the situation.
After thorough consideration, the IT staff concluded that recovery efforts would be unsuccessful due to the lack of expertise in rebuilding systems in-house, and that assistance was necessary.
The Midwest entity found and selected Alvaka to provide a solution via an experienced team. Alvaka’s ability to be available 24/7/365 with consistency and bring resources on-site stood out during the decisionmaking process.
Solutions
Alvaka’s solutions incorporate proven methods of recovery that are refined through numerous experiences of ransomware recovery and network reconfigurations. For the Midwest entity, the Alvaka team acted rapidly and utilized resources and connections to bring in a forensics firm, breach council, and ransom negotiator to accelerate the recovery process.
Alvaka engineers went on-site during COVID and facilitated a complete equipment replacement that transformed the client’s network and server infrastructure. The solution, tailored to unique cases, was implemented within 24 hours and restored operational functionality in four weeks.
To further accelerate the recovery, Alvaka placed their proprietary Ransomware R.E.S.C.U.E. Kit onsite in the client’s environment. The R.E.S.C.U.E. Kit is a powerful ransomware recovery device that contains the tools needed to rapidly recover and rebuild servers and workstations that have been victimized by ransomware. Alvaka was able to seamlessly integrate into the client’s environment without impacting the performance of their production systems, significantly reducing the timeframe for recovery.
Alvaka engineers went on-site during COVID and facilitated a complete equipment replacement that transformed the client’s network and server infrastructure. The solution, tailored to unique cases, was implemented within 24 hours and restored operational functionality in four weeks.
To further accelerate the recovery, Alvaka placed their proprietary Ransomware R.E.S.C.U.E. Kit onsite in the client’s environment. The R.E.S.C.U.E. Kit is a powerful ransomware recovery device that contains the tools needed to rapidly recover and rebuild servers and workstations that have been victimized by ransomware. Alvaka was able to seamlessly integrate into the client’s environment without impacting the performance of their production systems, significantly reducing the timeframe for recovery.
Benefits
Alvaka’s experienced team works effortlessly 24/7/365, ready to provide proven services needed to recover your business. Alvaka ensures complete transparency as a top priority, logging each and every step taken during your recovery process. Alvaka leverages unique resources and knowledge to provide tailored solutions so that your organization’s operations are restored to complete functionality.
Results
Within eight hours of initial contact, Alvaka gathered the necessary information of the network environment and constructed a solution within 24 hours that was ready for immediate implementation. Additionally, Alvaka significantly increased the security, scalability, and maintainability of the client’s network by leveraging the knowledge of battle-tested processes. The network and server infrastructure were converted from a SAN (storage area network) to a hyper-converged network, which exceeded the client’s objectives.
By providing unwavering commitment, professionalism, and expertise, the client was fully recovered and returned to maximum efficiency in 7 weeks.
By providing unwavering commitment, professionalism, and expertise, the client was fully recovered and returned to maximum efficiency in 7 weeks.
If you have any questions please reach out at (949) 428-5000 or sales@alvaka.net. We operate 24×7×365 with all US based personnel.
