Encrypted files on Server

[irishrocks]

I have a few hyper v servers 2012,2016 that have files encrypted on them from a few minutes over night on Dec 17th and Dec 18th. There was no ransom file and I have found no ransomware and don't believe it has happened since and have already restored the files. These servers are in a hyper-converged configuration. Could this be caused by something that was not malicious and just a server screw up on several computers. It only got so far on our large storage server but it only took minutes.

 

[Neemobeer]

How do you know they're encrypted, do they have a specific file extension?

 

[Josephur]

Let me guess you don't do nightly backups? Might be an expensive lessson.