CYBER SECURITY
Ransomware detected and stopped before it could spread
Legal services
Ransomware activity was detected on two servers at the same time. Automated monitoring stopped the affected processes within minutes, before any files were lost.
A Gisborne law firm's ransomware detection monitoring identified suspicious file activity on both its application server and its file server on the same day. The affected paths included active client case files, so the speed of the response mattered.
InfinityIT's monitoring automatically flagged the activity and killed the affected processes on both servers within minutes of detection. The InfinityIT team then reviewed both machines, checked backups, confirmed no data had been encrypted or lost, and worked through the standard patching and hardening steps to reduce the chance of a repeat.
No data loss, no ransom paid, and no disruption to the firm's ongoing casework. The incident closed within days, and the firm's ransomware detection policy has stayed in place since.