Encryption on Linux Securityhttps://linuxtransfer.com/tags/encryption/Recent content in Encryption on Linux SecurityHugoenWed, 04 Nov 2026 08:23:38 +0200The Cost of Over‑Broad Retention: How a 30‑Day Backup Policy Exposed 2 TB of PHIhttps://linuxtransfer.com/post/2026-11-04-the-cost-of-overbroad-retention-how-a-30day-b/Wed, 04 Nov 2026 08:23:38 +0200https://linuxtransfer.com/post/2026-11-04-the-cost-of-overbroad-retention-how-a-30day-b/<p>A 30‑day retention window is a default in many backup scripts and commercial tools. It feels safe: “I’ll keep the last month of data, that’s enough for recovery.” In 2025, a mid‑size clinic used exactly that policy on a set of encrypted LVM snapshots stored on a single NAS. When the NAS firmware update rolled out, the snapshots were corrupted, and the backup system fell back to a <em>restore‑all</em> mode. The result? 2 TB of unencrypted PHI leaked to a rogue process that had gained write access to the backup directory.</p>