GRAU DATA expands its ransomware protection portfolio for backups with the new Repository Security Check for Windows service. The service can be used independently of Blocky for Veeam® and identifies potential security weaknesses that could allow attackers to gain access to business-critical backups.

In an average of just 15 minutes, organizations gain a clear understanding of how secure their backup repositories are. Backup storage locations are often the weakest link in the backup chain due to excessive administrative privileges or exposed network configurations. During a personal consultation with a GRAU DATA expert, the Repository Security Check for Windows reviews seven common security vulnerabilities.

The seven assessment areas include:

1. Administrative Privileges: If an attacker gains administrative access to the repository, they can delete backups, encrypt them, or manipulate restore points.
2. Domain Administrator Check: If the backup server is part of the Active Directory domain, a compromised domain administrator account provides direct access to the backups—a classic ransomware attack path.
3. Backup Immutability: Without immutable backups, for example through WORM (Write Once, Read Many) technology, attackers often destroy backup data before launching encryption, making recovery nearly impossible.
4. Network Configuration: If backup servers, repositories, and production systems reside within the same network segment, a single compromised system can provide attackers with access to the entire backup infrastructure.
5. Account Privileges: Local administrator accounts, service accounts with domain administrator privileges, or shared accounts significantly increase the attack surface.
6. Backup Monitoring: Firewalls, endpoints, and email systems are typically monitored continuously. Backup solutions, modified backup jobs, and repository access, however, are often left unmonitored, allowing attackers to remain undetected for extended periods.
7. Backup and Restore Testing: Even if backups complete successfully, successful recovery is not guaranteed. Data readability, restore point integrity, and recovery performance should be verified regularly—not only during an emergency.

The Repository Security Check for Windows can be requested easily from GRAU DATA. Additional information and appointment scheduling are available online.

About GRAU DATA

GRAU DATA is the specialist for data archiving, data protection, and metadata mining. GRAU DATA is a medium-sized company based in Schwäbisch Gmünd near Stuttgart. A strong development team ensures innovative software solutions. GRAU DATA sells its products indirectly through distribution partners such as system houses, integrators, and hardware suppliers in Germany, Europe, and the USA.

Company contact:
GRAU DATA GmbH
Alessandra Nicoletti
73529 Schwäbisch Gmünd
alessandra.nicoletti@graudata.com
www.graudata.com

Press contact:
TC Communications

Thilo Christ

+49 8081 9546-17
thilo.christ@tc-communications.de
www.tc-communications.de

German-language articles

• https://www.channelpartner.de/article/4199865/grau-data-bietet-schnell-check-fur-backups-an.html
• https://www.it-daily.net/it-sicherheit/cloud-security/grau-data-sicherheitscheck
• https://www.storage-insider.de/grau-data-deckt-sicherheitsluecken-fuer-backups-auf-kostenlos-a-f2d6f5e8a6bf364677cac0ec029cbb5b/?cmp=beleg-mail&pt=6a60b0c70c4d0