Case Study: Large Health Care Organization achieves same-day Active Directory recovery and restored patient care with Quest Recovery Manager for Active Directory Disaster Recovery Edition

Health care organization speeds up recovery after a ransomware attack

A large health care organization with about 25,000 employees was hit by a late‑night ransomware attack that disrupted Active Directory and forced staff to operate hospitals and clinics using pen and paper. Rapid growth through mergers had left some AD forests unbacked and ownership unclear, and the absence of a coordinated business recovery plan delayed decisions and prolonged downtime.

The organization’s primary forest was already protected by Quest Recovery Manager, and Quest upgraded them to the Disaster Recovery Edition and provided expert support; automation enabled the primary forest to be restored within a day. Other unbacked forests required manual rebuilds over several days, but the response also included resetting compromised privileged accounts and strengthened cyber resilience—restoring critical services quickly and underscoring the importance of practiced technical and business recovery plans.