Full Ransomware Recovery During a Blizzard
A 100-bed critical access hospital was hit by ransomware that infected 140 workstations. The recovery team still restored every system, with no data loss, as described in the case study.
Read the case studyBackup & DR
Encrypted copies, tested restores, and a written plan for the day a restore is not optional.
Our backup and disaster recovery services keep encrypted copies of your systems and cloud data, with tested restores and defined RTO and RPO targets, so a ransomware event or outage does not turn into a long disruption. We cover endpoints and servers, Microsoft 365 tenant data such as email, SharePoint, Teams, and OneDrive, and a written recovery plan that has been tested. This work is built for regulated organizations that cannot afford to guess whether a restore will actually work.
Backups only matter if you can restore them. Each part below is built around that test.
Automated, encrypted backup of workstations and on-premise servers, with versioning, offsite copies, and the ability to restore a system, including bare-metal restores for servers when needed.
Backup of Microsoft 365 tenant data, including email, SharePoint, Teams, and OneDrive. Microsoft does not, on its own, provide recovery from user error, ransomware, or account compromise. Tenant backups close that gap and support retention requirements.
A written disaster recovery plan with defined recovery time and recovery point objectives, plus tests so the plan is not just a document on a shelf.
Auditors, insurers, and leadership will ask whether you can restore, how long it would take, and how much data you could lose. This work is designed to give you a clear answer.
Backups are a last line of defense. They are not a substitute for the controls that try to keep ransomware out in the first place.
Our cybersecurity services cover monitoring, endpoint protection, and incident response. Backup and disaster recovery services make sure there is a tested way back if an incident still gets through.
These backup and disaster recovery services are built for regulated organizations that cannot accept untested backups. If that sounds like your industry, start here:
The ransomware recovery case study on this site describes a hospital restore with no data loss. The other studies show why tested backups and a written plan matter in regulated environments.
About the author

Ken Satkunam, CISM
President & Founder, NorthStar Technology Group
Ken has spent over 25 years in IT leadership, serving in roles from technical support to CIO for organizations as large as 23,000 employees. He founded NorthStar Technology Group in 2000 to help regulated organizations build secure, compliant, and operationally resilient technology environments. Ken holds the Certified Information Security Manager (CISM) credential from ISACA and is the co-author of the Amazon best-seller "Cyber Attack Prevention." He has been quoted in industry publications including eWeek and DM News, and NorthStar has been recognized on the Inc. 5000 list in both 2024 and 2025.
Tell us what is being backed up today, whether a restore has been tested recently, and how long a real outage would be acceptable. We can talk through the gaps.