{"id":29145,"date":"2022-09-27T12:32:25","date_gmt":"2022-09-27T19:32:25","guid":{"rendered":"https:\/\/paladinpointofsale.com\/retailscience\/home\/?p=29145"},"modified":"2025-09-22T15:08:43","modified_gmt":"2025-09-22T22:08:43","slug":"ransomware-resolution-how-one-business-recovered","status":"publish","type":"post","link":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/","title":{"rendered":"Ransomware Resolution: How One Business Recovered"},"content":{"rendered":"<p>[et_pb_section fb_built=&#8221;1&#8243; fullwidth=&#8221;on&#8221; _builder_version=&#8221;4.16&#8243; background_color=&#8221;rgba(0,0,0,0.29)&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_fullwidth_post_title meta=&#8221;off&#8221; featured_placement=&#8221;background&#8221; _builder_version=&#8221;4.17.4&#8243; title_font=&#8221;|700||on|||||&#8221; title_text_color=&#8221;#ffffff&#8221; title_font_size=&#8221;30px&#8221; background_color=&#8221;rgba(0,0,0,0.25)&#8221; background_enable_image=&#8221;off&#8221; background_position=&#8221;top_center&#8221; background_blend=&#8221;color&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; text_orientation=&#8221;center&#8221; custom_padding=&#8221;15%||15%&#8221; z_index_tablet=&#8221;0&#8243; title_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; title_text_shadow_vertical_length_tablet=&#8221;0px&#8221; title_text_shadow_blur_strength_tablet=&#8221;1px&#8221; meta_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; meta_text_shadow_vertical_length_tablet=&#8221;0px&#8221; meta_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; text_shadow_style=&#8221;preset2&#8243; parallax_effect=&#8221;on&#8221; module_bg_color=&#8221;rgba(255,255,255,0)&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;][\/et_pb_fullwidth_post_title][\/et_pb_section][et_pb_section fb_built=&#8221;1&#8243; admin_label=&#8221;section&#8221; _builder_version=&#8221;4.16&#8243; global_colors_info=&#8221;{}&#8221;][et_pb_row admin_label=&#8221;row&#8221; _builder_version=&#8221;4.16&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; custom_padding=&#8221;0px|0px|18.95px|0px|false|false&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.16&#8243; custom_padding=&#8221;|||&#8221; global_colors_info=&#8221;{}&#8221; custom_padding__hover=&#8221;|||&#8221;][et_pb_text admin_label=&#8221;Intro&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p><em>October is Cybersecurity Awareness Month when government agencies and private industry works together to raise awareness about the importance of digital security. While news headlines focus on the impact of cybercrime against governments and large corporations, ransomware has become the No. 1 cyber threat to small businesses. Ransomware is a type of malicious software that encrypts a business\u2019s data so it cannot be viewed or utilized until a ransom payment is made. The following story is an account of how one business fell victim to a ransomware attack and how its retail technology provider \u2013 Paladin Data Corporation \u2013 helped it recover.<\/em><\/p>\n<p>Before business hours on an early Monday morning, the owner of seven retail hardware stores logged on to his business network from his home computer, as was his normal routine. \u00a0However, this morning was different; he noticed that someone other than himself had also logged on to the network as an administrator. A short time later his home printer, seemingly possessed, spit out several sheets of paper with a note informing him that his computers had been infected with ransomware.<\/p>\n<p>[\/et_pb_text][et_pb_testimonial author=&#8221;Store owner&#8221; quote_icon_color=&#8221;#cc6633&#8243; _builder_version=&#8221;4.18.0&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#D6D6D6&#8243; global_colors_info=&#8221;{}&#8221;]<strong><em>You can only imagine how I felt reading this. I immediately shut down and disconnected each of my computers and the home network.<\/em><\/strong><br \/>\n[\/et_pb_testimonial][et_pb_text admin_label=&#8221;A little later&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>A little later that same morning, one of the store managers arrived at work and turned on his computer to find an error message saying that it could not access the operating files. After a series of phone calls, both the store owner and the manager came to learn that 100 terminals across their seven stores were affected by ransomware.<\/p>\n<p>The hardware company owner says he believes that whoever struck his business counted on having the weekend to activate the ransomware and get out before being detected. It was his habit of working early mornings that allowed him to spot the activity and get a jump on damage control.<\/p>\n<p>[\/et_pb_text][et_pb_text admin_label=&#8221;The Response&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2>The Response<\/h2>\n<p>It\u2019s important to note that the store owner is technologically savvy and his stores have a dedicated IT manager and a variety of security protocols.<\/p>\n<p>After discovering their business network had been compromised, the business owner informed his information technology lead, their IT provider, and <a href=\"https:\/\/paladinpointofsale.com\/\" target=\"_blank\" rel=\"noopener\">Paladin Data Corporation<\/a> \u2013 their point-of-sale solution provider. Working with store management and the IT provider, Paladin went to work to alleviate the threat and get the stores running again.<\/p>\n<p>Paladin initiated the following approach to stop the spread and rebuild the network.<\/p>\n<p>[\/et_pb_text][et_pb_blurb title=&#8221;1) Stop the spread. &#8221; use_icon=&#8221;on&#8221; font_icon=&#8221;&#xf108;||fa||900&#8243; icon_color=&#8221;#cc6633&#8243; icon_placement=&#8221;left&#8221; admin_label=&#8221;Blurb &#8211; Stop the spread. &#8221; _builder_version=&#8221;4.18.0&#8243; _module_preset=&#8221;default&#8221; animation_style=&#8221;slide&#8221; animation_direction=&#8221;top&#8221; animation_delay=&#8221;750ms&#8221; global_colors_info=&#8221;{}&#8221;]\u201cFirst, you isolate all the hardware from getting infected and prevent further spread,\u201d said Paladin COO Ryan Dunn. \u201cWe had them unplug every PC from their network.\u201d<br \/>\n[\/et_pb_blurb][et_pb_blurb title=&#8221;2) Establish communication. &#8221; use_icon=&#8221;on&#8221; font_icon=&#8221;&#xf108;||fa||900&#8243; icon_color=&#8221;#cc6633&#8243; icon_placement=&#8221;left&#8221; admin_label=&#8221;Blurb &#8211; Establish communication.&#8221; _builder_version=&#8221;4.18.0&#8243; _module_preset=&#8221;default&#8221; animation_style=&#8221;slide&#8221; animation_direction=&#8221;top&#8221; animation_delay=&#8221;750ms&#8221; global_colors_info=&#8221;{}&#8221;]Make sure communication is clear. \u201cWe established clear communications with the business owner, store managers, supervisors, IT people \u2013 whomever we were dealing with during this event,\u201d Dunn added.<br \/>\n[\/et_pb_blurb][et_pb_blurb title=&#8221;3) Check the integrity of the computers. &#8221; use_icon=&#8221;on&#8221; font_icon=&#8221;&#xf108;||fa||900&#8243; icon_color=&#8221;#cc6633&#8243; icon_placement=&#8221;left&#8221; admin_label=&#8221;Blurb &#8211; Check the integrity&#8221; _builder_version=&#8221;4.18.0&#8243; _module_preset=&#8221;default&#8221; animation_style=&#8221;slide&#8221; animation_direction=&#8221;top&#8221; animation_delay=&#8221;750ms&#8221; global_colors_info=&#8221;{}&#8221;]\u201cOnce the spread of the ransomware was stopped, once you\u2019re in a controlled situation, then you do damage assessments,\u201d he explained.<br \/>\n[\/et_pb_blurb][et_pb_blurb title=&#8221;4) Get the stores open and running.&#8221; use_icon=&#8221;on&#8221; font_icon=&#8221;&#xf108;||fa||900&#8243; icon_color=&#8221;#cc6633&#8243; icon_placement=&#8221;left&#8221; admin_label=&#8221;Blurb &#8211; Get the stores open and running.&#8221; _builder_version=&#8221;4.18.0&#8243; _module_preset=&#8221;default&#8221; animation_style=&#8221;slide&#8221; animation_direction=&#8221;top&#8221; animation_delay=&#8221;750ms&#8221; global_colors_info=&#8221;{}&#8221;]\u201cOnce we determined that all the computers in the network were infected, we developed a plan to get the stores up and running again,\u201d Dunn said.<br \/>\n[\/et_pb_blurb][et_pb_text admin_label=&#8221;The Findings&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2>The Findings<\/h2>\n<p>In their inspection of the business network and database, Paladin\u2019s Managed Services technicians found computers on the network had been affected with BlackByte ransomware. It is suspected that the ransomware entered the stores\u2019 business network through Exchange Server, Microsoft\u2019s corporate email server used mostly by businesses that wish to host their own email.<\/p>\n<p>According to Trend Micro, BlackByte first drew the attention of the FBI and the U.S. Secret Service in July 2021. Since then it has been used extensively to attack government agencies and facilities, financial organizations, and food and agricultural businesses.<\/p>\n<p>As ransomware as a service (RaaS), BlackByte has been used relatively little against retail businesses \u2013 a little over 1% of the recorded attacks included retail.<\/p>\n<p>[\/et_pb_text][et_pb_text admin_label=&#8221;Rebuilding&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2>Rebuilding the Retail Point of Sale<\/h2>\n<p>Following the attack, Paladin had all the stores operable within hours. Within days the Paladin technicians and the stores\u2019 employees had all the Paladin-configured PCs running at full strength.<\/p>\n<p>[\/et_pb_text][et_pb_testimonial author=&#8221;Store owner&#8221; quote_icon_color=&#8221;#cc6633&#8243; _builder_version=&#8221;4.18.0&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#D6D6D6&#8243; global_colors_info=&#8221;{}&#8221;]<strong><em>With a wipe of the hard drive and a fresh install of Windows and Paladin POS, we were able to get going without any of the ransomware. We really didn\u2019t lose any data.<\/em><\/strong><br \/>\n[\/et_pb_testimonial][et_pb_text admin_label=&#8221;Rebuilding&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>Paladin was able to get the stores\u2019 retail point of sale up and running because the store owner had:<\/p>\n<ul>\n<li><span style=\"color: #cc6633\"><a style=\"color: #cc6633\" href=\"https:\/\/paladinpointofsale.com\/managed-services\/\" target=\"_blank\" rel=\"noopener\">Paladin Managed Services<\/a>&#x2122;<\/span> \u2013 The retail hardware company protected itself with Trend Micro antivirus and Paladin\u2019s Defense Pack, which automatically backs up files on all its computers. The company\u2019s <a href=\"https:\/\/portal.paladinpos.com\/datawise-systemwise\/\" target=\"_blank\" rel=\"noopener\">DataWise&#x2122;<\/a> service automatically backs up point-of-sale data throughout the day while <a href=\"https:\/\/portal.paladinpos.com\/datawise-systemwise\/\" target=\"_blank\" rel=\"noopener\">SystemWise&#x2122;<\/a> backs up all the data on a computer nightly.<\/li>\n<\/ul>\n<ul>\n<li><span style=\"color: #cc6633\">Paladin-configured computers<\/span> \u2013 The store owner purchased most of its point-of-sale PCs from Paladin. These computers were configured with Paladin Point of Sale, which made cleaning them out and reconfiguring them a relatively straightforward process. Flash drives of a clean operating system were sent overnight to the stores and a team of Paladin technicians did much of the work remotely.<\/li>\n<\/ul>\n<p>[\/et_pb_text][et_pb_text admin_label=&#8221;Back Open&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2>Back Open for Business<\/h2>\n<p>While Paladin was working on reconfiguring the hardware, the seven store locations opened to customers on a cash-only basis (hand-writing tickets and SKUs), and within hours of the attack the Paladin technicians had them up and running on Paladin Point of Sale. Each of the stores had the ability to serve customers and process payment cards.<\/p>\n<p>[\/et_pb_text][et_pb_testimonial author=&#8221;Store owner&#8221; quote_icon_color=&#8221;#cc6633&#8243; _builder_version=&#8221;4.18.0&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#D6D6D6&#8243; global_colors_info=&#8221;{}&#8221;]<strong><em>Paladin was on the case right away. <\/em><\/strong><em><strong>I could not be happier with the level of attention we received. Both Paladin and [our IT provider] went into all-hands-on-deck mode to get this solved.<\/strong><\/em><br \/>\n[\/et_pb_testimonial][et_pb_text admin_label=&#8221;Looking back&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h2><strong>Looking back<\/strong><\/h2>\n<p>Following the ransomware attack, the retail hardware store owner worked with his insurance company and forensic investigators to find out exactly what happened. After a detailed examination of one of his old PCs, <span style=\"color: #cc6633\"><strong>the company discovered that the ransomware was probably installed close to a year before it was activated<\/strong>.<\/span> It was probably activated by a person or group separate from the one that originally installed it.<\/p>\n<p>He credits Paladin, his IT providers, and some of his employees for limiting the damage.<\/p>\n<p>\u201cThe Paladin folks and [our IT providers] worked together quite closely, which was marvelous. The combination of assets between the two companies streamlined the process of getting us going again,\u201d he explained. \u201cSome of the younger people who work for us are good with computers. They offered to step up and help us out, and boy they were helpful. We had these people who were store clerks by day and became IT support when we needed them.<\/p>\n<p>\u201cWe are now at the two-month mark. We thought we might lose customer data and employee data. What we found out was that we really lost nothing. We got really lucky,\u201d he added.<\/p>\n<p>Despite the upheaval to his business and life, the owner says he still believes strongly in business technology.<\/p>\n<p>[\/et_pb_text][et_pb_testimonial author=&#8221;Store owner&#8221; quote_icon_color=&#8221;#cc6633&#8243; _builder_version=&#8221;4.18.0&#8243; _module_preset=&#8221;default&#8221; background_color=&#8221;#D6D6D6&#8243; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p><em><strong>I\u2019m a big believer in technology. This has been a nightmare and it\u2019s been stressful, but a law firm I\u2019m working with told me \u2018You came out of this spectacularly. The fact that you were able to come out of this without losing any of your data and without paying any ransom, you\u2019re an example of how to get through this.\u2019<\/strong><\/em><\/p>\n<p>[\/et_pb_testimonial][et_pb_text admin_label=&#8221;Note:&#8221; _builder_version=&#8221;4.18.0&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; vertical_offset_tablet=&#8221;0&#8243; horizontal_offset_tablet=&#8221;0&#8243; z_index_tablet=&#8221;0&#8243; text_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; text_text_shadow_vertical_length_tablet=&#8221;0px&#8221; text_text_shadow_blur_strength_tablet=&#8221;1px&#8221; link_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; link_text_shadow_vertical_length_tablet=&#8221;0px&#8221; link_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ul_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ul_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ul_text_shadow_blur_strength_tablet=&#8221;1px&#8221; ol_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; ol_text_shadow_vertical_length_tablet=&#8221;0px&#8221; ol_text_shadow_blur_strength_tablet=&#8221;1px&#8221; quote_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; quote_text_shadow_vertical_length_tablet=&#8221;0px&#8221; quote_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_2_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_2_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_2_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_3_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_3_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_3_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_4_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_4_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_4_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_5_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_5_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_5_text_shadow_blur_strength_tablet=&#8221;1px&#8221; header_6_text_shadow_horizontal_length_tablet=&#8221;0px&#8221; header_6_text_shadow_vertical_length_tablet=&#8221;0px&#8221; header_6_text_shadow_blur_strength_tablet=&#8221;1px&#8221; box_shadow_horizontal_tablet=&#8221;0px&#8221; box_shadow_vertical_tablet=&#8221;0px&#8221; box_shadow_blur_tablet=&#8221;40px&#8221; box_shadow_spread_tablet=&#8221;0px&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<p>Note: This group of hardware stores is a substantial operation, but its locations hardly make <em>it an obvious target for hackers. Location doesn\u2019t matter anymore. Assuming rural areas and small independent businesses aren\u2019t being targeted is a false sense of security. <\/em><\/p>\n<p><a href=\"https:\/\/paladinpointofsale.com\/2022\/09\/27\/tips-and-tools-to-improve-your-cybersecurity\/\" target=\"_blank\" rel=\"noopener\"><u>Click here<\/u><\/a> to learn what you can do to help reduce your chances of being affected by a ransomware attack.<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row disabled_on=&#8221;off|off|off&#8221; _builder_version=&#8221;4.16&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; global_colors_info=&#8221;{}&#8221;][et_pb_column type=&#8221;4_4&#8243; _builder_version=&#8221;4.16&#8243; custom_padding=&#8221;|||&#8221; global_colors_info=&#8221;{}&#8221; custom_padding__hover=&#8221;|||&#8221;][et_pb_text admin_label=&#8221;Author&#8221; _builder_version=&#8221;4.16&#8243; background_size=&#8221;initial&#8221; background_position=&#8221;top_left&#8221; background_repeat=&#8221;repeat&#8221; use_border_color=&#8221;off&#8221; border_color=&#8221;#ffffff&#8221; border_style=&#8221;solid&#8221; global_colors_info=&#8221;{}&#8221;]<\/p>\n<h3><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">brian bullock\u00a0<\/span><\/h3>\n<p><span data-contrast=\"auto\">Author<\/span> [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>October is Cybersecurity Awareness Month. This is how one business suffered a ransomware attack and how Paladin Data Corp helped it recover.<\/p>\n","protected":false},"author":13,"featured_media":29652,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[3,16,4],"tags":[],"class_list":["post-29145","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-all-posts","category-how-tos","category-industry-news","et-has-post-format-content","et_post_format-et-post-format-standard"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ransomware Resolution: How One Business Recovered - Retail Science<\/title>\n<meta name=\"description\" content=\"October is Cybersecurity Awareness Month. This is how one business suffered a ransomware attack and how Paladin Data Corp helped it recover.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware Resolution: How One Business Recovered - Retail Science\" \/>\n<meta property=\"og:description\" content=\"October is Cybersecurity Awareness Month. This is how one business suffered a ransomware attack and how Paladin Data Corp helped it recover.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/\" \/>\n<meta property=\"og:site_name\" content=\"Retail Science\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/paladindatacorp\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-27T19:32:25+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-22T22:08:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/paladinpointofsale.com\/retailscience\/wp-content\/uploads\/sites\/2\/2022\/09\/RS_Oct22_Ransomware-900.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"900\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Brian Bullock\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@paladindatacorp\" \/>\n<meta name=\"twitter:site\" content=\"@paladindatacorp\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brian Bullock\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/\"},\"author\":{\"name\":\"Brian Bullock\",\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/#\\\/schema\\\/person\\\/e5b5b4a78ded2bf74f8b4ca69f2a0518\"},\"headline\":\"Ransomware Resolution: How One Business Recovered\",\"datePublished\":\"2022-09-27T19:32:25+00:00\",\"dateModified\":\"2025-09-22T22:08:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/\"},\"wordCount\":4521,\"image\":{\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/09\\\/RS_Oct22_Ransomware-900.jpg\",\"articleSection\":[\"All Posts\",\"How-To's\",\"Industry News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/\",\"url\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/\",\"name\":\"Ransomware Resolution: How One Business Recovered - Retail Science\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/09\\\/RS_Oct22_Ransomware-900.jpg\",\"datePublished\":\"2022-09-27T19:32:25+00:00\",\"dateModified\":\"2025-09-22T22:08:43+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/#\\\/schema\\\/person\\\/e5b5b4a78ded2bf74f8b4ca69f2a0518\"},\"description\":\"October is Cybersecurity Awareness Month. This is how one business suffered a ransomware attack and how Paladin Data Corp helped it recover.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/#primaryimage\",\"url\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/09\\\/RS_Oct22_Ransomware-900.jpg\",\"contentUrl\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2022\\\/09\\\/RS_Oct22_Ransomware-900.jpg\",\"width\":900,\"height\":600,\"caption\":\"Image of a laptop screen with a Ransomware Attack message.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/ransomware-resolution-how-one-business-recovered\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ransomware Resolution: How One Business Recovered\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/#website\",\"url\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/\",\"name\":\"Retail Science\",\"description\":\"Intelligent Research for Retailers\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/#\\\/schema\\\/person\\\/e5b5b4a78ded2bf74f8b4ca69f2a0518\",\"name\":\"Brian Bullock\",\"url\":\"https:\\\/\\\/paladinpointofsale.com\\\/retailscience\\\/home\\\/author\\\/brianbullock\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ransomware Resolution: How One Business Recovered - Retail Science","description":"October is Cybersecurity Awareness Month. This is how one business suffered a ransomware attack and how Paladin Data Corp helped it recover.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/","og_locale":"en_US","og_type":"article","og_title":"Ransomware Resolution: How One Business Recovered - Retail Science","og_description":"October is Cybersecurity Awareness Month. This is how one business suffered a ransomware attack and how Paladin Data Corp helped it recover.","og_url":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/","og_site_name":"Retail Science","article_publisher":"https:\/\/www.facebook.com\/paladindatacorp\/","article_published_time":"2022-09-27T19:32:25+00:00","article_modified_time":"2025-09-22T22:08:43+00:00","og_image":[{"width":900,"height":600,"url":"https:\/\/paladinpointofsale.com\/retailscience\/wp-content\/uploads\/sites\/2\/2022\/09\/RS_Oct22_Ransomware-900.jpg","type":"image\/jpeg"}],"author":"Brian Bullock","twitter_card":"summary_large_image","twitter_creator":"@paladindatacorp","twitter_site":"@paladindatacorp","twitter_misc":{"Written by":"Brian Bullock","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/#article","isPartOf":{"@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/"},"author":{"name":"Brian Bullock","@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/#\/schema\/person\/e5b5b4a78ded2bf74f8b4ca69f2a0518"},"headline":"Ransomware Resolution: How One Business Recovered","datePublished":"2022-09-27T19:32:25+00:00","dateModified":"2025-09-22T22:08:43+00:00","mainEntityOfPage":{"@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/"},"wordCount":4521,"image":{"@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/#primaryimage"},"thumbnailUrl":"https:\/\/paladinpointofsale.com\/retailscience\/wp-content\/uploads\/sites\/2\/2022\/09\/RS_Oct22_Ransomware-900.jpg","articleSection":["All Posts","How-To's","Industry News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/","url":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/","name":"Ransomware Resolution: How One Business Recovered - Retail Science","isPartOf":{"@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/#website"},"primaryImageOfPage":{"@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/#primaryimage"},"image":{"@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/#primaryimage"},"thumbnailUrl":"https:\/\/paladinpointofsale.com\/retailscience\/wp-content\/uploads\/sites\/2\/2022\/09\/RS_Oct22_Ransomware-900.jpg","datePublished":"2022-09-27T19:32:25+00:00","dateModified":"2025-09-22T22:08:43+00:00","author":{"@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/#\/schema\/person\/e5b5b4a78ded2bf74f8b4ca69f2a0518"},"description":"October is Cybersecurity Awareness Month. This is how one business suffered a ransomware attack and how Paladin Data Corp helped it recover.","breadcrumb":{"@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/#primaryimage","url":"https:\/\/paladinpointofsale.com\/retailscience\/wp-content\/uploads\/sites\/2\/2022\/09\/RS_Oct22_Ransomware-900.jpg","contentUrl":"https:\/\/paladinpointofsale.com\/retailscience\/wp-content\/uploads\/sites\/2\/2022\/09\/RS_Oct22_Ransomware-900.jpg","width":900,"height":600,"caption":"Image of a laptop screen with a Ransomware Attack message."},{"@type":"BreadcrumbList","@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/ransomware-resolution-how-one-business-recovered\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/paladinpointofsale.com\/retailscience\/home\/"},{"@type":"ListItem","position":2,"name":"Ransomware Resolution: How One Business Recovered"}]},{"@type":"WebSite","@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/#website","url":"https:\/\/paladinpointofsale.com\/retailscience\/home\/","name":"Retail Science","description":"Intelligent Research for Retailers","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/paladinpointofsale.com\/retailscience\/home\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/paladinpointofsale.com\/retailscience\/home\/#\/schema\/person\/e5b5b4a78ded2bf74f8b4ca69f2a0518","name":"Brian Bullock","url":"https:\/\/paladinpointofsale.com\/retailscience\/home\/author\/brianbullock\/"}]}},"_links":{"self":[{"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/posts\/29145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/comments?post=29145"}],"version-history":[{"count":0,"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/posts\/29145\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/media\/29652"}],"wp:attachment":[{"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/media?parent=29145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/categories?post=29145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/paladinpointofsale.com\/retailscience\/home\/wp-json\/wp\/v2\/tags?post=29145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}