Business

Unhackable backup storage could have helped in the M&S hack case by keeping data physically offline – but it comes at a cost

By Efosa Udinmwen

Copyright techradar

Unhackable backup storage could have helped in the M&S hack case by keeping data physically offline - but it comes at a cost

Skip to main content

Tech Radar Pro

Tech Radar Gaming

Close main menu

the business technology experts

België (Nederlands)

Deutschland

North America

US (English)

Australasia

New Zealand

View Profile

Search TechRadar

Expert Insights

Website builders

Web hosting

Best web hosting
Best office chairs
Best website builder
Best antivirus
Expert Insights

Don’t miss these

Firevault introduces storage products built around offline disconnects to keep valuable data safe from ransomware

Hybrid cloud vs ransomware: why resilience starts with the right data strategy

Beyond backup: why cyber-resilient storage needs AI-powered intelligence

I am the co-founder of a managed hosting company, and here’s how you can reduce the risk of your company from being hacked

A chain reaction: inside the cyberattack that brought M&S to its knees

Marks & Spencer’s cyberattack isn’t an exception – it’s a warning

Avoiding service desk exploitation: deconstructing the modern retail attack

The resilient retailer’s guide to proactive cyber defense

Don’t stop at basic protections; make ongoing training a priority

I am a cybersecurity pro and here’s the most powerful strategy criminals are using against retailers right now

When ransomware hits home: putting your people first

Cracking the code: resilient defense and rapid recovery

Attack yourself first: the logic behind offensive security

The DDoS smoke screen: why restoring uptime may be your first mistake

The true cost of cyber attacks

Unhackable backup storage could have helped in the M&S hack case by keeping data physically offline – but it comes at a cost

Efosa Udinmwen

24 September 2025

Offline storage is not a magic shield

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

(Image credit: Blocksandfiles)

Recent Marks & Spencer attack reveals flaws in current enterprise backup strategies
HyperBUNKER pushes offline storage while critics question cost and practicality
Data diodes create one-way channels, keeping vaults disconnected from networks

Major UK retailer Marks & Spencer (M&S) was recently hit by a ransomware attack WHICH disrupted internal systems and reportedly locked employees out of critical files.

The incident is part of a broader trend of cybercriminals targeting large organizations with ransomware attacks and demanding payment to restore access.
This hack could have been prevented if backups were isolated, thereby preventing attackers from encrypting or deleting M&S’s data, but this “unhackable” approach brings its own financial burdens.

You may like

Firevault introduces storage products built around offline disconnects to keep valuable data safe from ransomware

Hybrid cloud vs ransomware: why resilience starts with the right data strategy

Beyond backup: why cyber-resilient storage needs AI-powered intelligence

Data diodes and physical isolation as last-resort protection
HyperBUNKER, a Zagreb-based spinoff of InfoLAB, promotes its diode-based offline vault as a safeguard against such breaches.

This system writes backups using data diode technology, a method that creates a strictly one-way “data-in” channel.
The backups are stored on SSDs or disk drives in a rack-shelf chassis, disconnected entirely from external networks.
This idea, familiar in nuclear facilities and military installations, has rarely been seen in everyday enterprise data protection.

Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
The company insists its vault remains invisible within network infrastructures and therefore unreachable to hackers.
“You see servers and drives shipped in [to InfoLAB] from all over Europe, companies locked out of their own data. And why does this happen if they have perfect cyber protection tools?” investor and advisor Matt Peterman told Blocksandfiles.
“Sometimes, it is due to hardware failure, and often due to ransomware. And in those ransomware cases, Nino [Nino Eškić, InfoLAB’s CEO] could do very little except suggest negotiating through brokers. That frustration is what pushed him to design an offline protection that actually preserves the most critical data.”

You may like

Firevault introduces storage products built around offline disconnects to keep valuable data safe from ransomware

Hybrid cloud vs ransomware: why resilience starts with the right data strategy

Beyond backup: why cyber-resilient storage needs AI-powered intelligence

HyperBUNKER claims its patented optical isolation and “butlering logic,” introduced in October 2024, avoids vulnerabilities tied to network protocols or handshake exploits that have plagued earlier diode-based systems.
Despite its promise, the concept raises concerns because traditional backups have collapsed or were bypassed in the past.
This happened in cases involving Capital Health, Community Health Systems, Veeam clients, and the NHS.
Offline storage is not a magic shield, although HyperBUNKER claims “the only vulnerability is the physical theft of the device.”
Distributing units and encrypting stored data can reduce risk, yet doing so multiplies logistical and financial demands.
Enterprises already juggling multiple backup solutions might hesitate to invest in a secondary “backup of backups.”
While the device is marketed as simple, removing dependence on complex protocol stacks, its effectiveness depends on careful handling and secure locations.
Businesses weighing this approach must consider whether the costs, logistics, and potential for physical theft outweigh the protection offered.
You may also like

Take a look at our guide to the best VPN with antivirus
These are the best zero trust network access solutions
Scaleflux’s SSD compresses datasets on the fly and delivers staggering performance

Efosa Udinmwen

Freelance Journalist

Efosa has been writing about technology for over 7 years, initially driven by curiosity but now fueled by a strong passion for the field. He holds both a Master’s and a PhD in sciences, which provided him with a solid foundation in analytical thinking. Efosa developed a keen interest in technology policy, specifically exploring the intersection of privacy, security, and politics. His research delves into how technological advancements influence regulatory frameworks and societal norms, particularly concerning data protection and cybersecurity. Upon joining TechRadar Pro, in addition to privacy and technology policy, he is also focused on B2B security products. Efosa can be contacted at this email: udinmwenefosa@gmail.com

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Firevault introduces storage products built around offline disconnects to keep valuable data safe from ransomware

Hybrid cloud vs ransomware: why resilience starts with the right data strategy

Beyond backup: why cyber-resilient storage needs AI-powered intelligence

I am the co-founder of a managed hosting company, and here’s how you can reduce the risk of your company from being hacked

A chain reaction: inside the cyberattack that brought M&S to its knees

Marks & Spencer’s cyberattack isn’t an exception – it’s a warning

Latest in Security

Insurance firm AIL allegedly hit in cyberattack – hackers claim info on over 150,000 users stolen, here’s what we know

Huge theft reportedly sees 2TB of private data stolen – police files hit in major breach

Small business security warning – new malware is spoofing tools such as ChatGPT, Microsoft Office and Google Drive, so be on your guard

Top electric car charger firm confirms data breach, tells users to be on their guard

Car giant Stellantis confirms data breach after third-party hit by cyberattack

Hackers are using GPT-4 to build a virtual assistant – here’s what we know

Latest in News

Gemini is coming to Google TV – now your big screen can actually talk back

Forget crypto scams – NordVPN’s new tool helps you keep your funds safe

Ghost of Tsushima players can now unlock exclusive merchandise with PlayStation’s new Franchise Rewards program

The next State of Play happens tomorrow, and it has a deep dive into one of the most mysterious PS5 exclusives

As Lenovo cancels some Legion Go 2 pre-orders, the first GPD Win 5 videos have landed – and I think it looks worth the premium price tag

People in Arizona will soon need to prove their age to access adult sites – and critics warn of privacy risks

LATEST ARTICLES

Alien: Earth season 1 ending explained: who dies, will there be a season 2, and more on the Hulu sci-fi horror show’s finale

These gorgeous and weird ultra-modern wooden wireless speakers are serious competition for Bang & Olufsen in the style stakes

AirPods Pro 3 are here, but should you buy AirPods Pro 2 instead if they’re a bargain? Here’s the price I’d pay, having tested both

Laifen Wave SE Toothbrush review: Gentle, affordable, dual-action cleaning

Huge theft reportedly sees 2TB of private data stolen – police files hit in major breach

TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

Contact Future’s experts

Terms and conditions

Privacy policy

Cookies policy

Advertise with us

Web notifications

Accessibility Statement

Future US, Inc. Full 7th Floor, 130 West 42nd Street,

Please login or signup to comment

Please wait…