The Situation
A small office believed the environment was protected because backup jobs were running and no obvious alerts were being reported.
The failure was in readiness. No one had tested a full restore, confirmed which business data was included, or documented what would happen if a drive, server, sync process, or ransomware event forced recovery during business hours.
For the owner, the business impact was not technical. It was lost operating time, uncertainty about which files could come back, and no clear answer for employees waiting to work.