admin

UK businesses are increasingly being targeted by cyber criminals — and ransomware is one of the most devastating threats. But while many businesses assume services like OneDrive or Google Drive keep them protected, that’s not the full story.

In this blog, we’ll explain why OneDrive is not a backup solution, what true backup protection looks like, and how you can safeguard your business from downtime, data loss, and costly recovery.

💣 What is Ransomware?

Ransomware is a type of malware that encrypts your files, then demands a ransom to unlock them. Victims often face:

• Complete loss of access to business-critical data
• Downtime while systems are restored
• Potential loss of customer trust
• In some cases, fines for breaching data protection laws

According to the UK’s NCSC, ransomware is one of the most significant cyber threats facing small and medium-sized businesses.

☁️ Why OneDrive is Not a Backup Solution

OneDrive (and similar cloud storage services like Dropbox or Google Drive) is great for:

• File syncing across devices
• Collaboration and sharing
• Version history (to a limited degree)

But here’s why it doesn’t count as a true backup:

1. It syncs, not backs up

If ransomware hits your PC, those encrypted files will sync to OneDrive too — meaning your cloud version becomes encrypted as well.

2. Limited version history

OneDrive does have a version history feature, but:

• It only retains a limited number of versions
• It may not work for all file types
• It doesn’t always include deleted files
• It’s not guaranteed for recovery from large-scale data loss

3. No offline or immutable copy

Backups should be offline, separate, and secure — ideally with versions that ransomware can’t touch. OneDrive is always connected, and that makes it vulnerable.

🔁 What Does a Proper Backup Strategy Look Like?

A real business backup plan includes:

✅ Automated, regular backups: Data should be backed up daily (or more often), without relying on staff to do it manually.

✅ Separate storage locations: At least one copy of your backup should be stored offsite or in a separate cloud environment that’s not automatically synced.

✅ Version history & retention: Good backup systems let you roll back to a specific point in time — useful if ransomware has been active for days before detection.

✅ Immutable backups: Some solutions offer “immutable” storage, meaning once the backup is written, it can’t be altered — even by ransomware.

✅ Regular testing: A backup is only good if it can be restored. We help our clients regularly test their backups to make sure everything works when it matters most.

🧩 What You Can Do Now

If you’re relying solely on OneDrive, Dropbox or similar, it’s time to rethink your approach. Here’s what we recommend:

1. Use OneDrive for collaboration, not backup
   • It’s a great tool — but it’s not designed for full disaster recovery.
2. Implement a proper cloud backup solution
   • We help customers set up secure, automated, and tested backups that comply with UK data protection laws.
3. Make ransomware part of your business risk plan
   • Prevention is key — but recovery is your safety net.

🟢 Our Advice for Businesses

At Cactus IT, we work with local businesses to build resilient, affordable backup plans tailored to their business needs — whether you’re a legal firm, manufacturer, or service provider.

Let’s have a chat about your current setup — we’ll tell you honestly if there are risks and how to fix them.

Want help getting your business protected against ransomware?

📞 Get in touch with our friendly team today and arrange a free review.

For businesses across Yorkshire and the UK, cyber security is a growing concern. Reports indicate a significant rise in cyber attacks targeting SMEs, with phishing being the most common method. If your business doesn’t have a dedicated IT security expert, implementing robust, yet simple, security measures is crucial.

A password manager like Keeper can be your frontline defence, bolstering both your cybersecurity and operational efficiency.

Elevate Your Cybersecurity Posture

Password managers help your business combat cyber threats and we have thoroughly tested and compared the current offerings. Our team agree, Keeper comes out best and this is why:

• Enforcing Strong, Unique Passwords: Weak or reused employee passwords are a major risk. Keeper generates complex, unique passwords for every account, enforcing strong security policies like minimum length and complexity, and identifying weak or reused credentials that need changing. This is critical as AI tools can now crack weak passwords. We like the passphrase generator that’s included, giving you the option for passwords or passphrases.
• Enabling Multi-Factor Authentication (MFA) and Passkeys: Keeper simplifies the use of MFA, adding an essential layer of security that can prevent unauthorised access even if a password is compromised. It can store Time-based One-Time Password (TOTP) codes. Furthermore, Keeper supports passkeys, a phishing-resistant, passwordless authentication method that simplifies logins while boosting security.
• Providing Secure, Encrypted Storage: Forget insecure sticky notes or spreadsheets. Keeper offers secure, encrypted storage for login credentials and sensitive data. It uses a zero-trust and zero-knowledge security architecture with full end-to-end encryption, ensuring only authorised users can access and decrypt their data.
• Securely Managing Access & Sharing: Define user access needs and organise employees into role-based groups, ensuring only appropriate personnel have access to specific passwords. Keeper also facilitates secure, encrypted sharing of passwords and files among team members, including time-limited sharing with non-users.
• Mitigating Risks from Employee Departures: Keeper streamlines the critical process of removing a departing employee’s access to all company systems and swiftly changing passwords, preventing data compromise.
• Dark Web Monitoring: Some Keeper plans include dark web monitoring (like BreachWatch), alerting you if your credentials appear online, enabling prompt action.
• Combatting Phishing Attacks: Keeper’s autofill feature helps employees avoid manually entering credentials on fake websites, significantly reducing susceptibility to phishing scams, which are a very common attack type.

Boost Your Operational Efficiency

Beyond security, Keeper enhances daily operations:

• Streamlined Onboarding & Offboarding: New hires get immediate, secure access to necessary login credentials based on their role, eliminating delays. Similarly, offboarding becomes quick and secure.
• Increased Employee Productivity: Employees only need to remember one master password to access their secure vault, saving valuable time spent on remembering or resetting forgotten credentials. KeeperFill automatically logs users into websites and apps across devices and browsers, boosting productivity.
• Centralised Organisation and Control: Keeper organises all team passwords with unlimited records and groups. The Admin Console offers powerful visibility and control, allowing quick user setup, disabling, removal, team creation, and policy enforcement.
• Long-Term Cost Savings: Investing in Keeper can prevent costly cyber attacks, data breaches, and business interruptions, ultimately saving your business significant money.

Don’t wait for an attack to strike. Strengthen your businesses digital defence and streamline operations. Start your free 14-day trial of Keeper Enterprise today to protect your company’s data and enhance productivity.

As an IT support company in Yorkshire, we understand the constant struggle businesses face in safeguarding their digital assets against evolving cyber threats. You’re likely managing crucial data and communications within your Microsoft 365 accounts, making them prime targets for cybercriminals.

With cyberattacks becoming more sophisticated and frequent, relying solely on a password is no longer enough to secure your valuable information. Adversaries are constantly seeking new ways to compromise accounts, even those protected by basic security measures, which is why robust defence is more critical than ever.

The most effective solution to significantly enhance your Microsoft 365 security is to implement Multi-Factor Authentication (MFA). MFA, or Two-Factor Authentication (2FA), adds an essential extra layer of security by requiring you to provide at least two different methods of verification to access your account. This means that even if a cybercriminal manages to obtain your password, they would still need a second factor, like a code sent to your phone or a verification from an authenticator app, to gain access. Microsoft data shows that MFA can prevent 99.9% of account compromise attacks, dramatically reducing your risk. We highly recommend using the Microsoft Authenticator app for a more secure and faster experience, as it’s considered one of the most secure verification options.

You can start setting up MFA for your account by visiting: https://aka.ms/mfasetup, sign into your Microsoft 365 account, select ‘+Add sign-in method’ and select ‘Microsoft Authenticator’ (see below for a setup guide video).

We know that rolling out new security measures can sometimes feel complex. That’s where Cactus IT comes in. Our team of experts considers enabling MFA on your Microsoft 365 accounts an essential task for all businesses and is ready to assist you. If you require any assistance with setting up Multi-Factor Authentication, or need advice on the best approach for your organisation, please do not hesitate to contact us.

You can reach the Cactus IT team by calling 01943 666 711 or emailing support@cactus-it.co.uk.

We’re here to ensure your business is protected in the best possible way.

We have included a link below that shows you how to set this up for your account once it’s been enabled by your admin.

---

In today’s fast-moving digital world, the pace at which cyber threats evolve is nothing short of relentless. As an IT support company based in Yorkshire, we understand just how overwhelming this can be for businesses. One day everything seems secure, the next you’re hearing about the latest ransomware strain or a new type of phishing scam. We work with businesses of all sizes, and we know that keeping up with these changes can feel like a full-time job in itself.

That’s why we believe it’s our responsibility—not just to fix problems—but to actively protect our customers from the growing tide of cyber risks. We’re not just a support provider; we’re your cyber security partner. We’re here to ease the pressure and keep your systems resilient, giving you the confidence to focus on what you do best.

---

Why We’ve Upgraded Your Endpoint Protection

We’re pleased to announce that we’ve upgraded the endpoint security we provide from ESET Protect Entry to ESET Protect Advanced to better secure our customers IT.

This upgrade includes more than just improved antivirus and malware protection. It introduces cloud-based sandboxing to detect and block new, never-before-seen threats before they can impact your systems. This works by isolating suspicious files in a secure, virtual environment to analyse their behaviour before they can harm your system. It’s ESET’s latest defence against Ransomware and helps to protect your systems from never before seen threats. Our upgrade to ESET Protect Advanced also adds full disk encryption, helping you stay compliant with GDPR and keeping your data safe even if a device is lost or stolen.

We’ve chosen ESET Protect Advanced because it reflects the level of protection modern businesses need: multi-layered, intelligent, and proactive. This move is part of our wider commitment to continuously improve the service and value we provide to you.

---

Get a Free 1-Hour Cyber Security Review

If you’re not currently a customer but want to understand where your business stands when it comes to cyber risk, we’re offering a free 1-hour cyber security review. This no-obligation session includes a review of your current setup, identifies any critical gaps, and offers practical, tailored advice.

Whether you’re a small team or a growing business, it’s never been more important to take cyber security seriously. Contact us today to book your review and take the first step toward stronger protection for your business.

📞 Call us on 01943 666711
📧 Or email: info@cactus-it.co.uk

---