I have a friend who works for Saudi Aramco. They tried to play down the effects of the attack, but they had to replace 30,000 hard drives. My friend's work for

I have a friend who works for Saudi Aramco. They tried to play down the effects of the attack, but they had to replace 30,000 hard drives. My friend's work for the past year was wiped out. The only people who were saved were those who made local back-ups on USB drives which were not connected. In most large companies, there are strict rules about connecting personal hard drives to the company's network, but in this case, those who violated the rules were able to survive the attack best. Back-ups were compromised as well. It is not clear why Aramco did not have back-ups which were offline and accessible.