In addition to setting up backups, there’s another step you should probably think about: make sure whatever credentials you are using to store those backups (if

In addition to setting up backups, there’s another step you should probably think about: make sure whatever credentials you are using to store those backups (if using an object storage service) are only allowed to add/append/upload and _not_ delete. I have seen attackers wiping backup locations a few times now, and it isn’t immediately obvious to people. Sorry it happened to you, but it’s a good lesson learned. Better luck in the future.