@jeff

If you know of a small or medium-sized business that hasn't got any offsite backups, what would you advise them? You know my views on security, but you'd find me telling them to get a backup tool that offers 256-bit AES encryption for backups and then store the encrypted backups in AWS or Azure blob storage. I know of no cases where this combination has been hacked. Sure, if you leave the ids and passwords lying around maybe, then someone might use them but not through frontal attack. I'm all for balancing the risks, and I can think of plenty of businesses who have been destroyed by losing their data.

@Chrisn

No need to retype it, because it is on all the dodgy Russian sites in plain text. 🙂

@SHirst

Many thanks