Client Background: Our client is a high-end retail jewelry seller with multiple locations across Oahu, Maui, and the Big Island. As a business dealing in luxury goods, they rely heavily on their point-of-sale (POS) systems to keep operations running smoothly across their six retail locations.
The Challenge: The client reached out to Cowabunga Computers after falling victim to a ransomware attack. Their main server was compromised due to a brute force attack on an open Remote Desktop Protocol (RDP) port, left exposed by their previous IT service provider. As a result, all of their POS data was encrypted, severely disrupting their business operations. Additionally, their “main server” was an outdated desktop, far from the reliable, commercial-grade server they needed to support their growing operations.
The Solution: Cowabunga Computers quickly assessed the situation and found that the ransomware had penetrated the server through port 3389, which had been left open for remote access. Our immediate focus was on securing the business and restoring operations:
- Quick Recovery: We built a temporary high-end workstation and installed Windows Server 2022, creating a domain environment to stabilize their systems.
- Collaboration with POS Provider: We worked closely with their POS provider, Edge, which operates on a peer-to-peer network, to recover and synchronize the POS data from other store locations. This allowed us to restore full functionality across all six retail sites.
- Zero Downtime Migration: To provide a long-term solution, we ordered a commercial-grade Dell server. In the meantime, we utilized Hyper-V on the temporary workstation and successfully performed a live migration to the new server once it arrived. The entire migration process was seamless, with zero downtime for the client’s operations.
- Managed Services & Security: After stabilizing their network, Cowabunga Computers introduced our managed services plan, which included:
- Managed Firewalls: Installation and configuration of managed firewalls with site-to-site VPNs between all locations, drastically improving inter-store synchronization.
- Custom PowerShell Scripts: To address the frequent failures and corrupt file issues with Edge’s syncing system, we developed custom PowerShell scripts that alert us to any syncing problems. This enables us to repair corrupted files quickly, preventing the multi-week delays they previously experienced.
- Enhanced Support: They now have a dedicated pool of support hours to meet their staff’s technical needs, providing peace of mind and ensuring their business runs smoothly.
Results/Benefits:
- Improved Stability: Thanks to the stable site-to-site VPNs and custom-coded monitoring scripts, the frequency of syncing failures has decreased from multiple times a week to about once a month.
- Efficient Issue Resolution: What used to be a syncing problem that caused weeks of delay is now promptly fixed as soon as an alert is triggered.
- No Downtime: Our live migration strategy ensured the business did not experience any downtime during the transition to their new server.
- Reliable IT Support: The client now has a reliable pool of hours for any technical support needs, ensuring they no longer have to search for IT assistance during critical moments.
Their ongoing satisfaction with our services and the dramatic improvement in their IT infrastructure speaks for itself. They are no longer struggling with syncing issues and have peace of mind knowing their network is secure and fully supported by Cowabunga Computers.
