What systems do you have in place?
We have some physical backups but they're always a week old. We have online restic backups but they're open to attack. I don't know how to protect our systems.
My main "oh god everything is dead" full system backups pull from the servers rather than having them push to backup storage. Just in case though I also have individual sites pushing snapshots to write-only S3 with glacier/expiration rules set up as appropriate.
3-2-1 backup strategy on both of these too. 3 copies, 2 different types of storage, (at least) 1 offsite.
Also you do test your backups now and then, right? At least check the filesize. You don't want to find out your zip function has been creating empty zip files for the past 6 months in this situation. That's how I learned to backup properly :P
1. Panic 2. Backups ? 3. Panic 4. Shop for saviors 5. Buy new equipment & software pushed by saviors 6. Pay ransom (or have insurance pay it) 7. Be as opaque as you can (Say nothing, glitches and accidents happen... // direct contact only customers & partners with confirmed affected data // vaguely refer to a cyber incident in financial reports // Creative legal communications plan // etc.)
They will create immutable snapshots of your data using ZFS.
I thought, who keeps only one backup? If I get ransomwared, I need to be able to restore to separate copies. Maybe lose a few days of data but nothing is gone forever.