Ransomware-Related Data Recovery

Data recovery after a ransomware-related data-loss event

DataRecovery.lk can assess storage media and data affected during a ransomware-related event to determine whether data-recovery options may be available. Each case depends on the affected storage and the events that occurred. Recovery is not guaranteed.

What this service covers

This service is for assessment and data-recovery work involving affected storage. It does not include dedicated ransomware decryption, cybersecurity incident response, malware removal, ransom negotiation, breach forensics or threat investigation.

Preserving affected data

• Avoid unnecessary writes to affected storage.
• Do not format or reinitialise affected media.
• Preserve the original storage where practical.
• Record what happened and which actions have already been taken.
• For cybersecurity containment or incident-response decisions, follow your organisation’s IT/security process or consult a qualified security provider.

Assessment process

1. Contact DataRecovery.lk.
2. Describe the affected storage or system and the observed data-loss event.
3. Share details of actions already taken.
4. The case is assessed for possible data-recovery options.
5. An assessment and quotation are provided.
6. Recovery work proceeds only if appropriate and agreed.

Evaluation fee

The current ransomware-related data recovery evaluation fee is Rs. 8,000. The evaluation fee is non-refundable. Recovery/service charges, where applicable, are quoted separately after assessment.