Skip to main content



How can we help you?


Druva Documentation

How to recover data for a Ransomware-impacted device using Druva inSync Cloud?

Heads up!

We've transitioned to a new documentation portal to serve you better. Access the latest content by clicking here.



This article applies to:

  • OS: Windows
  • Product edition: inSync Cloud 

This article explains the steps that you must perform as an inSync administrator to recover data from inSync Cloud if the client device is affected by a Ransomware attack.

Steps to restore data directly to the device

Ensure that the device is cleaned post the ransomware attack.

  1. Install and activate the inSync Client.
  2. Open inSync Client and click Restore.

  3. Select the device from which you want to restore the data.

  4. Choose the snapshot from which you want to restore the data.

  5. Right-click on the folder you want to restore and click Restore.

  6. Choose the appropriate device and location, and click Ok.The restore will begin.

    Alternatively, you can restore data using the inSync Administrator Management Console.

Steps to restore data from the inSync Management Console

  1. Log in to the inSync Management Console.
  2. On the console menu bar, click Availability > Restore.

  3. Use the Search box in the top right corner to find the affected user.

  4. Select the user and click Restore at the bottom of the page.
  5. Select the device from where you want to restore the data.

  6. Choose the appropriate snapshot from which you want to restore the data.

  7. Select the folder from the right hand pane that you wish to restore.

  8. Click Download.


The data download will begin.

Please contact Druva Technical Support if you encounter any issues.