Forum Discussion
how to recover from a ransomware attack that encrypts files on sharepoint
There isn't an equivalent feature as there is for https://support.office.com/en-us/article/restore-your-onedrive-fa231298-759d-41cf-bcd0-25ac53eb8a15. Microsoft can on request via support, I understand restore a site collection for this sort of situation with mass data loss. It's alluded to here - https://blogs.technet.microsoft.com/sposupport/2016/09/19/handling-ransomware-in-sharepoint-online/. It's not a particular flexible option but it's good to have the possibility at least.
severt There are a few more details here http://icansharepoint.com/restoration-options-sharepoint-online/ and 'Getting a Microsoft restoration' as well as what else is available.
Thanks for the replies!
Disappointing though. My nightmare scenario is that one user gets the virus, it goes through all of the files locally , opens, encrypts, saves the file with the same name and extension. They are propagated back to the sharepoint site. Now I have to individually restore all files. Ouch!
Looks like I will need to find a backup solution outside of Office 365.
