Many small businesses and families assume their files are safe because they live in OneDrive, Google Drive, Dropbox or iCloud Drive. Those services are excellent for working across devices, but syncing is not the same as backing up. A sync service’s job is to make every copy match – so when a file is deleted, overwritten or encrypted by ransomware on one computer, that change is faithfully copied everywhere else, often within seconds. If you have just discovered missing or damaged files in a synced folder, here is what is happening and what to do.
How sync spreads a problem
- Deletions sync. Delete a folder on your laptop and it disappears from the cloud and from every other device signed in to the account.
- Overwrites sync. Save over a spreadsheet with the wrong version and the old one is replaced everywhere.
- Ransomware syncs. When ransomware encrypts files on a computer, the sync client sees thousands of “changed” files and uploads the encrypted versions, replacing the good ones in the cloud.
- Account problems affect everything. If an account is compromised, suspended or deleted (for example when an employee leaves and their Microsoft 365 license is removed), the synced data can go with it.
What to do right now if files are missing or encrypted
- Stop the spread. If you suspect ransomware, disconnect the affected computer from the network and pause or quit the sync app on any other devices. See our ransomware recovery page before going further.
- Check the cloud recycle bin. OneDrive, Google Drive, Dropbox and iCloud Drive all keep deleted files for a limited time – often around 30 days on personal plans, and it varies by plan and by your administrator’s settings for business accounts. Restore from the web interface rather than the desktop app.
- Use version history. Most services keep earlier versions of files. In OneDrive and Google Drive you can right-click a file online and open its version history; Dropbox has similar options.
- Use account-wide restore if it exists. Microsoft 365 subscribers can use OneDrive’s “Restore your OneDrive” feature to roll the whole account back to a point within the last 30 days, which is useful after ransomware. Dropbox offers a similar rewind feature on some plans, and iCloud.com has a Data Recovery option for recently deleted files.
- Don’t make it worse. Avoid “cleaning up” by deleting more files, re-syncing from a damaged computer, or emptying any recycle bin until you know what you can get back.
When the cloud cannot help
If the retention period has passed, the files were only ever stored locally (a common surprise with “Files On-Demand” or folders that were never actually included in sync), or the account itself is gone, the cloud provider may have nothing left to restore. The next place to look is the original computer’s hard drive or SSD. Recovery from an SSD is often limited because of TRIM, but older hard drives, external drives and some other situations can still yield results. Our deleted file recovery service starts with an engineer evaluation, and we work from a copy of the drive rather than the original. The less the computer has been used since the loss, the better the chances.
What a real backup looks like
A proper backup is separate from your day-to-day files, keeps history, and can’t be wiped by the same mistake or attack. For a home office or small business in the US, that usually means:
- Versioned backups that keep many restore points over weeks or months, not just the latest copy.
- At least one copy off-site and one offline or immutable – a backup that ransomware on your network cannot reach or alter.
- Backing up the cloud itself. Microsoft 365 and Google Workspace data should be backed up to a separate service, because the platform’s own recycle bins and retention are not designed to be your only safety net.
- Regular restore tests. A backup you have never restored from is a hope, not a plan.
- Monitoring. Someone should notice when a backup job fails, before you need it.
If you’d like this handled for you, see our managed backup service. We provide on-site IT support across Los Angeles, the Inland Empire and Ventura County.
Lost files from a synced folder?
Call Data Retrieval at (213) 986-4855 or book a data recovery evaluation. An engineer will look at your situation and give you a fixed quote, and recovery only starts once you approve it. Mail-in service is available from anywhere in the US.