Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Ransomware Recovery with Hitachi & Commvault Data Fortress

Commvault
10/09/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


And today we want to introduce you to a new solution that Hitachi and Commvault have brought to the market, our Data Fortress. The Data Fortress helps not only to protect data, but it helps to protect data in a ransomware recovery event. And so we know there's numerous things that can impact our operations. Things from hardware or system failures, geographical events, such as tornadoes, hurricanes, floods, even power outages. But today we're going to focus on ransomware. And we know that data breaches are increasing year over year. So are the number of threat actors in their level of sophistication. And so no matter how well we prepare, sometimes the unexpected happens. Let's take a look at MGM. MGM was attacked with a phishing scheme where hackers impersonated an employee simply using LinkedIn information to fool the IT help desk for system access. When MGM found the initial attack, they turned off their authentication services to try and lock out the attacker. Unfortunately, the damage was already done, and they had encrypted more than 100 hypervisors in the environment. So what was the impact to MGM? Well, first of all, their customers had their data stolen. Many of them were locked out of the hotel and check-ins were compromised. A ransomware demand of $30 million was made, $15 million was paid. They had a total loss of business of $100 million. And they had to pay overtime and consulting fees of $10 million. And recovery time? Well, the core applications took 10 days, but the full return to operations took five weeks in total. So how does this data fortress help our customers? Well, first of all, we provide a remedy for a cyber attack because we provide the restore capabilities immediately. As you notice here, we have our production environment where we're backing up our file servers, our virtualized environment, our database servers to an HSX appliance. We can also move data off of block storage by way of IntelliSnap onto that HSX environment. That block array also has private fiber channel connections over into the cyber recovery environment. Now notice we have two connections here, one, a private fiber channel connection, as well as a secure encrypted connection into that data fortress. Within the data fortress, we have our control plane already built out because we cannot expect to be able to leverage any of the production elements because they will be in a quarantine environment. And then lastly, notice we have within the recovery environment and beside our data fortress, the isolated or the IRE environment, where now we can restore all of those applications and its resources in its fullness. So the basis of this platform is built on hardware root of trust. We then add a layer of hardware encryption on top of that, and then at the application layer, we leverage our space-efficient, immutable, long-term retention snapshots, then Hitachi's 100% data availability guarantee. So that when that time comes, customers have a high level of confidence that not only can they recover their data, but those systems that they've invested in will be available. So now let's take a look at what happens when that encryption event occurs. So now we have our immutable copies landing on the Hitachi storage array. They're being moved over private fiber channel connections over to the secondary Hitachi array inside of that data fortress. Well now we can begin the process by way of convolte orchestration of creating those snap on snap copies. So we're taking those immutable copies, we're creating a secondary copy of those safe snaps, and then we're presenting those to the hypervisors so that they can then quickly bring up those applications. And so how can customers prepare? Well, it's been a challenge because if we leverage classic backup technologies, they take a long time to recover and require additional space. Our solution introduces fast recovery for large amounts of data without needing additional space. Customers have often leveraged storage-based snapshots, but many times those are not application consistent. Our solution provides application consistent recovery so that we ensure that we protect all of the data. And lastly, preparedness. IT organizations have not always been able to recover confidently because they cannot rehearse those recovery scenarios. With our environment, those resources are available 24 by 7 so that they can test that recovery any hour of the day in any day of the week. So our resiliency is based on confidence. Confidence in the immutability in the encryption. Our confidence in that AirGap technology. We know that it's reliable with our unique integration with Commvault. You've got those application consistent data copies, and it's fast. The super quick recovery using snap-on-snap technology and Commvault's orchestration capability. So in summary, we want to be able to protect that data to identify that point of attack through technologies like ThreadScan. We want to be able to leverage our SafeSnap so that we can cover massive amounts of data very quickly. We want to be able to power up and get things going quickly by recovering those systems and making sure that we recover every bit of data with those application consistent snapshots. And then we want to expose that environment and get going again. So with that, I hope you will take the time to investigate our Data Fortress solution. Have a great day.

TL;DR

  • Hitachi Vantara and Commvault Data Fortress delivers ransomware recovery through immutable snapshots, hardware root of trust, and an isolated recovery environment connected via private Fibre Channel and encrypted connections.
  • The MGM ransomware attack cost $100 million in business losses, $15 million in ransom payment, and required five weeks for full recovery—demonstrating the critical need for rapid, reliable restoration capabilities.
  • Snap-on-Snap technology enables fast, space-efficient recovery at scale by creating secondary copies of immutable SafeSnap data and presenting them directly to hypervisors for immediate application restoration.
  • Organizations can rehearse ransomware recovery scenarios 24/7 in the isolated recovery environment without impacting production, ensuring confidence and preparedness when an actual attack occurs.

Data Fortress Architecture and Ransomware Defense

Hitachi Vantara and Commvault have jointly engineered Data Fortress, a cyber-resilient recovery solution designed to address the escalating threat of ransomware attacks. The architecture leverages hardware root of trust, hardware encryption, and immutable SafeSnap technology to create a defense-in-depth approach. The solution replicates production data from file servers, virtualized environments, databases, and block storage to an HSX appliance, then moves immutable copies via private Fibre Channel connections into an isolated recovery environment. This air-gapped data fortress includes a dedicated control plane that remains independent of production systems, ensuring recovery capabilities remain intact even when production infrastructure is compromised. The platform's Snap-on-Snap technology enables rapid, space-efficient recovery at scale by creating secondary copies of immutable snapshots and presenting them directly to hypervisors for immediate application restoration.

MGM Case Study and Recovery Time Economics

The presentation uses the MGM ransomware attack as a cautionary example of operational and financial impact. Attackers used LinkedIn information to impersonate an employee and fool the IT help desk into granting system access. When MGM discovered the breach and disabled authentication services, the damage was already done—over 100 hypervisors had been encrypted. The attack resulted in customer data theft, hotel lockouts, compromised check-ins, a $30 million ransom demand with $15 million paid, $100 million in business losses, and $10 million in overtime and consulting fees. Recovery of core applications took 10 days, with full operational restoration requiring five weeks. Data Fortress addresses these challenges by providing immediate restore capabilities, application-consistent recovery, and 24/7 rehearsal capabilities in an isolated environment, enabling organizations to validate their recovery posture without impacting production systems.

Chapters

0:00 - Introduction to Data Fortress
0:57 - MGM Ransomware Attack Case Study
2:00 - Data Fortress Architecture Overview
4:04 - Recovery Process and Snap-on-Snap
4:53 - Preparedness and Testing Capabilities
6:28 - Summary and Call to Action

Key Quotes

0:05 "... today we want to introduce you to a new solution that Hitachi and Commvault have brought to the market, our Data Fortress ..."
1:43 "A ransomware demand of $30 million was made, $15 million was paid. They had a total loss of business of $100 million."
3:47 "... the basis of this platform is built on hardware root of trust. We then add a layer of hardware encryption on top of that, and then at the application layer, we leverage our space-efficient, immutable, long-term retention snapshots, then Hitachi's 100% data availability guarantee."
5:31 "IT organizations have not always been able to recover confidently because they cannot rehearse those recovery scenarios. With our environment, those resources are available 24 by 7 so that they can test that recovery any hour of the day in any day of the week."

FAQ

How does Data Fortress enable recovery testing without disrupting production operations?

Data Fortress provides a fully isolated recovery environment with dedicated resources available 24/7. Organizations can rehearse ransomware recovery scenarios at any time using immutable snapshot copies replicated via private Fibre Channel, allowing teams to validate recovery procedures, test application consistency, and measure recovery time objectives without any impact to production workloads or business operations.

What makes Data Fortress recovery faster than traditional backup restoration?

Data Fortress uses Snap-on-Snap technology to eliminate traditional restore windows. Instead of copying data back from backup storage, the solution creates secondary snapshots of immutable SafeSnap copies and presents them directly to hypervisors. This approach provides immediate access to application-consistent data without requiring additional storage space or lengthy data transfer operations, enabling recovery at scale in minutes rather than hours or days.


Categories:
  • » Webinar Library » Commvault
  • » Data Protection » Backup & Recovery
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Data Protection
  • Cloud Security
  • Backup & Recovery
  • Product Demo
  • Technical Deep Dive
  • Ransomware Recovery
  • Cyber Resilience
  • Immutable Snapshots
  • Air-Gapped Storage
  • Application-Consistent Backup
  • Disaster Recovery Testing
  • Hardware Root of Trust
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Ransomware Recovery with Hitachi & Commvault Data Fortress

              XStreaminars (watch here)

              • Oct
                28

                EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                10/28/202601:00 PM ET
                More events

                Industry Events (Sponsor Hosted)

                • Oct
                  13

                  Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

                  10/13/202601:00 PM ET
                  • Oct
                    15

                    Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

                    10/15/202611:00 AM ET
                    • Oct
                      20

                      Harnessing Data Governance for AI with Cyera and Snowflake

                      10/20/202611:00 AM ET
                      • Oct
                        27

                        Maximize Security, Value, and Returns on Your Microsoft Investment

                        10/27/202611:00 AM ET
                        • Oct
                          27

                          The HUMAN Experience: Real-Time Insights into Page Intelligence

                          10/27/202601:00 PM ET
                          More events

                          Upcoming Webinar Calendar

                          • 10/13/2026
                            01:00 PM
                            10/13/2026
                            Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance
                            https://www.truthinit.com/index.php/channel/2159/transitioning-from-cjis-to-ferpa-essential-audit-evidence-for-compliance/
                          • 10/15/2026
                            11:00 AM
                            10/15/2026
                            Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation
                            https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
                          • 10/20/2026
                            11:00 AM
                            10/20/2026
                            Harnessing Data Governance for AI with Cyera and Snowflake
                            https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
                          • 10/27/2026
                            11:00 AM
                            10/27/2026
                            Maximize Security, Value, and Returns on Your Microsoft Investment
                            https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
                          • 10/27/2026
                            01:00 PM
                            10/27/2026
                            The HUMAN Experience: Real-Time Insights into Page Intelligence
                            https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                          • 10/28/2026
                            01:00 AM
                            10/28/2026
                            [APAC:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2125/apac-ensuring-comprehensive-security-for-ai-applications/
                          • 10/28/2026
                            06:00 AM
                            10/28/2026
                            [EMEA:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2127/emea-ensuring-ai-security-across-all-platforms/
                          • 10/28/2026
                            01:00 PM
                            10/28/2026
                            [AMERICAS:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-strategies-and-insights/
                          • 10/28/2026
                            01:00 PM
                            10/28/2026
                            EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                            https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                          • 11/04/2026
                            11:00 AM
                            11/04/2026
                            Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape
                            https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
                          • 11/04/2026
                            11:00 AM
                            11/04/2026
                            Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                            https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                          • 11/05/2026
                            02:00 PM
                            11/05/2026
                            HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI
                            https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
                          • 11/05/2026
                            02:00 PM
                            11/05/2026
                            Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                            https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            360View: Govern, Secure & Recover Your Microsoft 365 Environment
                            https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                          Truth in IT
                          • Sponsor
                          • About Us
                          • Terms of Service
                          • Privacy Policy
                          • Contact Us
                          • Preference Management
                          Desktop version
                          Standard version