{"id":118040,"date":"2022-12-21T03:13:25","date_gmt":"2022-12-21T03:13:25","guid":{"rendered":"https:\/\/www.stellarinfo.com\/blog\/?p=118040"},"modified":"2025-12-08T09:28:31","modified_gmt":"2025-12-08T09:28:31","slug":"rackspace-ransomware-response-new-updates","status":"publish","type":"post","link":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/","title":{"rendered":"Rackspace Ransomware Response: Data Extraction, Server Recovery, and New Server Deployment"},"content":{"rendered":"<?xml encoding=\"utf-8\" ?><?xml encoding=\"utf-8\" ?><p>Rackspace has shared an update informing the customers about the latest developments and updates on what they are doing behind the scenes to recover and restore customers&rsquo; data. In this blog, we have shared the crux of what they are doing in response to the ransomware attack.<\/p><p>Rackspace has currently restored its systems in an isolated environment. Their experts have installed CrowdStrike&rsquo;s endpoint detection and monitoring tool&mdash;Falcon on every impacted server for enhanced visibility across the environment.<\/p><p>They removed the malicious files and ran additional scans to check and ensure that each server is clean. The clean servers are then released with Falcon installed on them in a new environment&mdash;ready for the next stage.<\/p><h2 class=\"wp-block-heading\" id=\"server-recovery\">Server Recovery<\/h2><p>After validating each server, the team of internal experts recovered data from the affected Hosted Exchange servers. As of now, the process of data recovery from affected servers is complete.<\/p><h2 class=\"wp-block-heading\" id=\"deploying-new-environment\">Deploying New Environment<\/h2><p>Clean servers, with CrowdStrike Falcon installed on them, are placed into an isolated clean environment&mdash;away from the rest of the Rackspace network.<\/p><p>Once the cybersecurity experts validate the servers, they will be ready to be deployed and released in the new environment for data extraction.<\/p><h2 class=\"wp-block-heading\" id=\"data-extraction\">Data Extraction<\/h2><p>Rackspace has set up an automation to extract customers&rsquo; data from the database files (EDBs) on their Hosted Exchange Servers. The data is extracted from the Exchange database (EDB) files to individual PST files for each customer account. These files are then moved to the staging environment for data restoration.<\/p><p>However, the restoration is currently in the initial phase and their experts are currently testing the possibilities to successfully transfer and restore data from the PST files.<\/p><p>They also stated that not every PST file will be recoverable as some of them might be corrupt due to their large size. For your information, PST files are sensitive and prone to damage or corruption when they are large or oversized.<\/p><p>However, they are maintaining additional secure copies of the customer data for redundancy. Thus, in case of PST corruption, customers can use the backups to restore missing data.<\/p><p>Rackspace will soon provide their customers with their PST files through a secure portal. If you are affected by the Rackspace outage and waiting for your users&rsquo; mailbox data to be released, Rackspace will notify you once the PST files are available for download.<\/p><h2 class=\"wp-block-heading\" id=\"final-thoughts\">Final Thoughts<\/h2><p>Once you have the PST files downloaded on your system, you can send them to respective users and ask them to import the PST file into their Microsoft 365 profile in Outlook through the Import Export wizard. You as an administrator may also follow the Network Upload or Drive Shipping method to import PST files into Microsoft 365.<\/p><p>However, if you want to avoid the hassle of importing PST files manually, you can use an Outlook to Microsoft 365 migrator software, such as <a href=\"https:\/\/www.stellarinfo.com\/import-pst-to-office-365.php\" target=\"_blank\" rel=\"noreferrer noopener\">Stellar Migrator for Outlook<\/a>. The software can help you import the PST files of all your users directly into the mailboxes on the Microsoft 365 tenant in a few clicks&mdash;with minimal effort and time.<\/p><p>All you need to do is select the PST file of the user, scan it, and then enter the Microsoft 365 credentials to import the PST file into the Microsoft 365 mailbox. This way you can quickly restore the emails of all your users.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Rackspace has shared an update informing the customers about the latest developments&hellip; <a class=\"more-link\" href=\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/\">Continue reading <span class=\"screen-reader-text\">Rackspace Ransomware Response: Data Extraction, Server Recovery, and New Server Deployment<\/span><\/a><\/p>\n","protected":false},"author":32,"featured_media":118048,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2960],"tags":[],"class_list":["post-118040","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-migrate-to-office-365","entry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Rackspace Ransomware Response: New Server Deployment<\/title>\n<meta name=\"description\" content=\"Rackspace is currently recovering and exporting customers&#039; data from the databases on the hosted Exchange Servers to PST format.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Rackspace Ransomware Response: New Server Deployment\" \/>\n<meta property=\"og:description\" content=\"Rackspace is currently recovering and exporting customers&#039; data from the databases on the hosted Exchange Servers to PST format.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/\" \/>\n<meta property=\"og:site_name\" content=\"Stellar Data Recovery Blog\" \/>\n<meta property=\"article:author\" content=\"https:\/\/facebook.com\/raavisingh\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-21T03:13:25+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-08T09:28:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ravi Singh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/ravi51ngh\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ravi Singh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/\"},\"author\":{\"name\":\"Ravi Singh\",\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/#\/schema\/person\/7dea10d15c0307370e21d7da07d0cd11\"},\"headline\":\"Rackspace Ransomware Response: Data Extraction, Server Recovery, and New Server Deployment\",\"datePublished\":\"2022-12-21T03:13:25+00:00\",\"dateModified\":\"2025-12-08T09:28:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/\"},\"wordCount\":560,\"image\":{\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg\",\"articleSection\":[\"Migrate to Office 365\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/\",\"url\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/\",\"name\":\"Rackspace Ransomware Response: New Server Deployment\",\"isPartOf\":{\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg\",\"datePublished\":\"2022-12-21T03:13:25+00:00\",\"dateModified\":\"2025-12-08T09:28:31+00:00\",\"author\":{\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/#\/schema\/person\/7dea10d15c0307370e21d7da07d0cd11\"},\"description\":\"Rackspace is currently recovering and exporting customers' data from the databases on the hosted Exchange Servers to PST format.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#primaryimage\",\"url\":\"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg\",\"contentUrl\":\"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg\",\"width\":1000,\"height\":600,\"caption\":\"Rackspace Ransomware Response: Data Extraction, Server Recovery, and New Server Deployment\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.stellarinfo.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rackspace Ransomware Response: Data Extraction, Server Recovery, and New Server Deployment\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/#website\",\"url\":\"https:\/\/www.stellarinfo.com\/blog\/\",\"name\":\"Stellar Data Recovery Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.stellarinfo.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/#\/schema\/person\/7dea10d15c0307370e21d7da07d0cd11\",\"name\":\"Ravi Singh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.stellarinfo.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9e95cad83fe279b559794f62193f34300d01db8f9f2ec45ce529b7ecde3796ba?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9e95cad83fe279b559794f62193f34300d01db8f9f2ec45ce529b7ecde3796ba?s=96&d=mm&r=g\",\"caption\":\"Ravi Singh\"},\"description\":\"Ravi Singh is a Senior Writer at Stellar\u00ae. He is an expert Tech Explainer, IoT enthusiast, and a passionate nerd with over 7 years of experience in technical writing. He writes about Microsoft Exchange, Microsoft 365, Email Migration, Linux, Windows, Mac, DIY Tech, and Smart Home. Ravi spends most of his weekends working with IoT (DIY Smart Home) devices and playing Overwatch. He is also a solo traveler who loves hiking and exploring new trails.\",\"sameAs\":[\"https:\/\/stellarinfo.com\/blog\",\"https:\/\/facebook.com\/raavisingh\",\"https:\/\/instagram.com\/ravi.s1ngh\",\"https:\/\/linkedin.com\/in\/ravi-singh-5a65356a\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/ravi51ngh\",\"https:\/\/youtube.com\/ravisingh9\"],\"url\":\"https:\/\/www.stellarinfo.com\/blog\/author\/ravi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Rackspace Ransomware Response: New Server Deployment","description":"Rackspace is currently recovering and exporting customers' data from the databases on the hosted Exchange Servers to PST format.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/","og_locale":"en_US","og_type":"article","og_title":"Rackspace Ransomware Response: New Server Deployment","og_description":"Rackspace is currently recovering and exporting customers' data from the databases on the hosted Exchange Servers to PST format.","og_url":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/","og_site_name":"Stellar Data Recovery Blog","article_author":"https:\/\/facebook.com\/raavisingh","article_published_time":"2022-12-21T03:13:25+00:00","article_modified_time":"2025-12-08T09:28:31+00:00","og_image":[{"width":1000,"height":600,"url":"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg","type":"image\/jpeg"}],"author":"Ravi Singh","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/ravi51ngh","twitter_misc":{"Written by":"Ravi Singh","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#article","isPartOf":{"@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/"},"author":{"name":"Ravi Singh","@id":"https:\/\/www.stellarinfo.com\/blog\/#\/schema\/person\/7dea10d15c0307370e21d7da07d0cd11"},"headline":"Rackspace Ransomware Response: Data Extraction, Server Recovery, and New Server Deployment","datePublished":"2022-12-21T03:13:25+00:00","dateModified":"2025-12-08T09:28:31+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/"},"wordCount":560,"image":{"@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg","articleSection":["Migrate to Office 365"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/","url":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/","name":"Rackspace Ransomware Response: New Server Deployment","isPartOf":{"@id":"https:\/\/www.stellarinfo.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#primaryimage"},"image":{"@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg","datePublished":"2022-12-21T03:13:25+00:00","dateModified":"2025-12-08T09:28:31+00:00","author":{"@id":"https:\/\/www.stellarinfo.com\/blog\/#\/schema\/person\/7dea10d15c0307370e21d7da07d0cd11"},"description":"Rackspace is currently recovering and exporting customers' data from the databases on the hosted Exchange Servers to PST format.","breadcrumb":{"@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#primaryimage","url":"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg","contentUrl":"https:\/\/www.stellarinfo.com\/blog\/wp-content\/uploads\/2022\/12\/Rackspace-Ransomware-Response.jpg","width":1000,"height":600,"caption":"Rackspace Ransomware Response: Data Extraction, Server Recovery, and New Server Deployment"},{"@type":"BreadcrumbList","@id":"https:\/\/www.stellarinfo.com\/blog\/rackspace-ransomware-response-new-updates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.stellarinfo.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Rackspace Ransomware Response: Data Extraction, Server Recovery, and New Server Deployment"}]},{"@type":"WebSite","@id":"https:\/\/www.stellarinfo.com\/blog\/#website","url":"https:\/\/www.stellarinfo.com\/blog\/","name":"Stellar Data Recovery Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stellarinfo.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.stellarinfo.com\/blog\/#\/schema\/person\/7dea10d15c0307370e21d7da07d0cd11","name":"Ravi Singh","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.stellarinfo.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9e95cad83fe279b559794f62193f34300d01db8f9f2ec45ce529b7ecde3796ba?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e95cad83fe279b559794f62193f34300d01db8f9f2ec45ce529b7ecde3796ba?s=96&d=mm&r=g","caption":"Ravi Singh"},"description":"Ravi Singh is a Senior Writer at Stellar\u00ae. He is an expert Tech Explainer, IoT enthusiast, and a passionate nerd with over 7 years of experience in technical writing. He writes about Microsoft Exchange, Microsoft 365, Email Migration, Linux, Windows, Mac, DIY Tech, and Smart Home. Ravi spends most of his weekends working with IoT (DIY Smart Home) devices and playing Overwatch. He is also a solo traveler who loves hiking and exploring new trails.","sameAs":["https:\/\/stellarinfo.com\/blog","https:\/\/facebook.com\/raavisingh","https:\/\/instagram.com\/ravi.s1ngh","https:\/\/linkedin.com\/in\/ravi-singh-5a65356a\/","https:\/\/x.com\/https:\/\/twitter.com\/ravi51ngh","https:\/\/youtube.com\/ravisingh9"],"url":"https:\/\/www.stellarinfo.com\/blog\/author\/ravi\/"}]}},"_links":{"self":[{"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/posts\/118040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/comments?post=118040"}],"version-history":[{"count":7,"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/posts\/118040\/revisions"}],"predecessor-version":[{"id":187989,"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/posts\/118040\/revisions\/187989"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/media\/118048"}],"wp:attachment":[{"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/media?parent=118040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/categories?post=118040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stellarinfo.com\/blog\/wp-json\/wp\/v2\/tags?post=118040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}