How a Perth law firm recovered from ransomware in under a day
When ransomware hit a CBD law firm overnight, immutable backups and a tested recovery plan had them back working before lunch — with no ransom paid.
< 1 day
Full recovery time
$0
Ransom paid
100%
Matter files restored
0
Clients lost
The challenge
A ransomware attack encrypted the firm's primary file server and attempted to reach the backups. With court deadlines that week and client privilege at stake, every hour offline risked both revenue and reputation.
What we did
Because the firm was on our managed agreement, immutable cloud backups had been running and verified daily — the ransomware could not touch them. We isolated the affected systems, stood up a clean environment, and restored all matter files from the most recent verified backup while preserving forensic evidence for the cyber insurer.
The outcome
The firm was operational again the same morning. No ransom was paid, no matter files were lost, and the documented incident response satisfied both the cyber insurer and the firm's professional-indemnity obligations. We then hardened identity with conditional access and ran staff phishing training to prevent a repeat.
Services involved
Could we do the same for you?
Book a free 30-minute IT assessment. We'll review your setup and tell you honestly where you stand.