If you have been hacked and your files deleted, there are a few steps you can take to attempt recovery:
- Verify Your Backups: If you have offline backups, you can restore the data that has been encrypted or deleted after removing the ransomware from your environment.
- Use OneDrive Recovery Options: If your files were stored in OneDrive, you can use the Files Restore feature in OneDrive for Business to restore your entire OneDrive to a previous point in time within the last 30 days. For more information, see Restore your OneDrive.
- Check for Soft Deleted Files: If your files were part of an Azure file share, check if they are in a soft deleted state. If they are, you can undelete the file share to restore it to an active state.
- Contact Support: If you're unable to recover the files using the above methods, consider reaching out to Microsoft support for further assistance.
Make sure to also take steps to secure your accounts and devices to prevent further unauthorized access.