--- title: SPONSORED: The backup Microsoft never promised you description: Microsoft's SaaS ecosystem (M365, Entra ID, Azure) operates under a shared responsibility model where Microsoft ensures service availability but does not... canonical: https://daily.dev/posts/sponsored-the-backup-microsoft-never-promised-you-2d1p8xpft twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: SPONSORED: The backup Microsoft never promised you | daily.dev og:description: Microsoft's SaaS ecosystem (M365, Entra ID, Azure) operates under a shared responsibility model where Microsoft ensures service availability but does not... og:url: https://daily.dev/posts/sponsored-the-backup-microsoft-never-promised-you-2d1p8xpft og:image: https://api.daily.dev/og/posts/2D1p8xPFT.png og:image:alt: SPONSORED: The backup Microsoft never promised you og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # SPONSORED: The backup Microsoft never promised you **[The Register](https://daily.dev/sources/theregister)** · 8 min read · 0 upvotes · 0 comments ## Summary Microsoft's SaaS ecosystem (M365, Entra ID, Azure) operates under a shared responsibility model where Microsoft ensures service availability but does not guarantee restoring data to a pre-attack state after ransomware or credential compromise. Brent Torre of Kaseya argues organizations need independent, immutable cloud-to-cloud backups stored outside the Microsoft tenant to recover reliably, and promotes Datto's backup products for M365, Azure, and Entra ID as a solution to this gap. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Does Microsoft 365 back up my data against ransomware attacks? Microsoft's native tools address short-term accidental deletion and data governance, but they are not a backup solution and do not protect against ransomware or restore data to a known-good point before an attack. Under the shared responsibility model, Microsoft keeps the service running, but the customer remains responsible for the information, devices, accounts, and identities within Microsoft 365, SQL Server, or Azure VMs. _Teams weighing backup strategies for Microsoft 365 track vendor responsibility gaps like this one on daily.dev._ ### Why is Microsoft Entra ID a common target for ransomware attacks? Entra ID has become a prime attack vector because credential compromise lets attackers bypass technical defenses entirely, gaining access through stolen passwords rather than exploited vulnerabilities. Once inside, attackers can quietly harvest data from mailboxes, OneDrive, SharePoint, and Teams before launching ransomware. Microsoft reports tracking over 4,000 identity attacks per second and analyzing 38 million identity risk detections daily. _Security engineers hardening identity systems follow developments like Entra ID attack trends on daily.dev._ ## Similar posts on daily.dev - [5 reasons Microsoft 365 backup isn’t enough for business data protection](https://daily.dev/posts/5-reasons-microsoft-365-backup-isn-t-enough-for-business-data-protection-gzp4c1a34) · BleepingComputer · 1 upvotes · 1 comments - [SPONSORED: Schrödinger's backup: not actually recovered until you try to restore IT](https://daily.dev/posts/sponsored-schr-dinger-s-backup-not-actually-recovered-until-you-try-to-restore-it-ivzsh28n2) · The Register · 0 upvotes · 0 comments - [Azure cloud security: Detect cloud ransomware with Tenable One](https://daily.dev/posts/azure-cloud-security-detect-cloud-ransomware-with-tenable-one-jehrbrdeg) · Tenable Blog · 0 upvotes · 0 comments - [Commvault Allies with Microsoft to Protect Data Using Azure Cloud](https://daily.dev/posts/commvault-allies-with-microsoft-to-protect-data-using-azure-cloud-bk1aa37ro) · Security Boulevard · 0 upvotes · 0 comments - [Ransomware gang’s slip-up led to data recovery for 12 US firms](https://daily.dev/posts/ransomware-gang-s-slip-up-led-to-data-recovery-for-12-us-firms-ekfv0vyfb) · CSO Online · 0 upvotes · 0 comments --- Tags: [#microsoft](https://daily.dev/tags/microsoft), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/sponsored-the-backup-microsoft-never-promised-you-2d1p8xpft) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"SPONSORED: The backup Microsoft never promised you","url":"https://daily.dev/posts/sponsored-the-backup-microsoft-never-promised-you-2d1p8xpft","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/sponsored-the-backup-microsoft-never-promised-you-2d1p8xpft"},"datePublished":"2026-08-13T15:05:11.312Z","dateModified":"2026-08-13T15:05:35.463Z","description":"Microsoft's SaaS ecosystem (M365, Entra ID, Azure) operates under a shared responsibility model where Microsoft ensures service availability but does not...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dad1e2daecf271f45e2b2b1679139ce0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dad1e2daecf271f45e2b2b1679139ce0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/sponsored-the-backup-microsoft-never-promised-you-2d1p8xpft","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"microsoft,ransomware","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"SPONSORED: The backup Microsoft never promised you"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/sponsored-the-backup-microsoft-never-promised-you-2d1p8xpft#faq","mainEntity":[{"@type":"Question","name":"Does Microsoft 365 back up my data against ransomware attacks?","acceptedAnswer":{"@type":"Answer","text":"Microsoft's native tools address short-term accidental deletion and data governance, but they are not a backup solution and do not protect against ransomware or restore data to a known-good point before an attack. Under the shared responsibility model, Microsoft keeps the service running, but the customer remains responsible for the information, devices, accounts, and identities within Microsoft 365, SQL Server, or Azure VMs. Teams weighing backup strategies for Microsoft 365 track vendor responsibility gaps like this one on daily.dev."}},{"@type":"Question","name":"Why is Microsoft Entra ID a common target for ransomware attacks?","acceptedAnswer":{"@type":"Answer","text":"Entra ID has become a prime attack vector because credential compromise lets attackers bypass technical defenses entirely, gaining access through stolen passwords rather than exploited vulnerabilities. Once inside, attackers can quietly harvest data from mailboxes, OneDrive, SharePoint, and Teams before launching ransomware. Microsoft reports tracking over 4,000 identity attacks per second and analyzing 38 million identity risk detections daily. Security engineers hardening identity systems follow developments like Entra ID attack trends on daily.dev."}}]} ```