Originally Posted by Bert
Having your backups "air gapped" should give you 5 stars! Encrypted is good, but it wouldn't stop ransomware if it attacked the backups.

Thanks Bert.

Actually David says what really saved the day was shutting down the server so quickly, which was my son and David's decision (I was in the OR and found out after the fact). If given time, it probably would have infected the entire system, regardless of encryption or not.

This is the timeline of events:
I was charting via rdp from hospital computer on a procedure I was just finished a little after 8 am
I was kicked out of rdp suddenly.
I reconnected and tried to log on to AC; window pops up saying unable to find database, please find path...
Called to OR as next case ready.
Did quick case, 1 hour
Meanwhile Staff started to be kicked out as well and import pdf files were unable to be opened in AC. Soon spread to all user files.
Staff called my son who is my local IT man; he was in college taking class.
get call from son around 10 am, "I shut down the server we are having ramsonware attack"


Gerardo Carcamo
Surgeon
San Antonio, TX