Rolled out Vembu BDRSuite with air-gap and ransomware recovery for a hospital group across 14 clinics, in under six weeks.

The problem

Healthcare is among the most targeted sectors for ransomware, and it has the least tolerance for downtime. A clinic that cannot reach patient records is not degraded — it is closed.

Multi-site providers face a particular version of this. Each site accumulates its own backup arrangements over time, and the group ends up with inconsistent retention, uneven coverage, and no single view of whether a restore would actually succeed. Microsoft 365 is a common blind spot: mailboxes, SharePoint and OneDrive are frequently assumed to be backed up by the platform when they are not.

What we deployed

Vembu BDRSuite provides agentless backup across virtual machines, physical servers and Microsoft 365 from one console — which is what makes a 14-site estate manageable rather than fourteen separate problems.

Two properties mattered most here:

  • Immutability and air-gap. A backup an attacker can encrypt or delete is not a recovery plan. Immutable copies cannot be altered within their retention window, and air-gapped copies are unreachable from the production network.
  • Rehearsed recovery. Restores were tested in a clean-room rather than assumed. A backup you have never restored is a hypothesis, not a control.

For environments needing a dedicated ransomware layer, BDRShield extends the same approach with zero-trust recovery.

Outcome

  • 14 clinics brought under a single backup and recovery policy
  • Under six weeks from start to completed rollout
  • Immutable, air-gapped copies with recovery rehearsed rather than assumed

Why it matters beyond this deployment

The six-week figure is the part most providers find surprising. Consolidating backup across a multi-site estate is usually imagined as a year-long programme, and that expectation is often what delays it. The blocker is rarely technical — it is that nobody owns the question of whether recovery works.

More on the sector in VDI and EUC for healthcare, or read why Vembu BDRSuite wins on M365 protection.

If your backups run nightly but have never been restored, that is the usual reason to book a free EUC assessment.