The Situation
A small office with fewer than 15 employees believed the environment was protected. Backups were running, no obvious alerts were being reported, and there was an assumption that data could be recovered if needed.
No one had ever performed a full restore. The backup system looked functional, but the business had never tested what would actually happen under failure.