Cybersecurity attacks will increase sharply in 2025, and Microsoft has been one of many prominent targets. Research shows that 70 percent of M365 tenants have experienced account takeovers, and 81 percent have encountered email investigation.

To reduce this ongoing risk, Rubrik and Sophos entered into a strategic partnership to help effective IT teams strengthen their cyber resilience and simplify recovery from ransomware, account compromise, insider threats, and data loss in Microsoft 365.

The new joint solution makes Sophos M365 Backup and Recovery, powered by Rubrik, is the only M365 data protection solution that is fully integrated into Sophos' powerful cybersecurity console. For customers who already rely on Sophos for detection and prevention, this integration provides fast and secure recovery of SharePoint, Exchange, OneDrive and Teams data when it is accidentally or maliciously compromised.

Advertisement

Rubrik's SaaS-based protection will be available via Sophos Central – same platform which security teams already rely on to manage their defenses.

The need is now greater than ever

the number of commercial (paid) Microsoft 365 At the beginning of 2025, exceeded users 400 million . If global administrator credentials are compromised for any of these million users, attackers could manipulate storage settings and permanently delete critical business data.

Built-in tools weren’t built for cyber resilience at this scale. Litigation Hold is designed for legal search, not for recovering massive amounts of corporate data. The Recycle Bin is limited and short-term, and can’t roll back an entire data asset after a breach. These kinds of built-in features can serve specific use cases, but aren’t enough to meet corporate needs. At worst, they provide a false sense of security.

Recovery needs to be fast, detailed, and reliable at scale. That's where Rubrik comes in.

Cyber recovery and resilience at the next level

According to The State of Ransomware report from Sophos, only 54% of companies affected by ransomware relied on backups for data recovery, while almost half of organizations opted for a significantly more expensive method by paying the ransom to restore their data, highlighting a continued lack of effective cyber resilience practices.

The Rubrik/Sophos integration is designed to bridge this gap in several key ways:

• Immutable, secure backups: Rubrik isolates backups from the Microsoft 365 tenant and protects them with air gap architecture, WORM-locked immutability, and customer-owned encryption keys. Multi-factor authentication and intelligent data lockout help prevent tampering, even if credentials are compromised.
• Fast and flexible recovery: Customers will be able to search for and restore emails, files, folders, shared mailboxes, OneDrive, SharePoint sites, and Teams channels to the original location or to another user. Rubrik will support both active and inactive accounts and deliver high-performance restores using containers orchestrated with Azure Kubernetes Service.
• Automated protection and compliance: Rubrik automatically discovers new users, websites, and mailboxes, applies policy-based protection with Entra ID groups, and offers delegated admin controls. Sophos Central makes this automated protection easy to manage and eliminates tedious backup tasks for overworked administrators.

This new feature will be available in Sophos Central. No new interfaces to learn. No extra tools. Just a unified experience for both security measures and Microsoft 365 data protection.

Building cyber resilience, together

By collaborating with Heading Sophos will be able to give customers the tools they need to quickly and accurately detect, protect and recover if unwanted agents breach Microsoft systems. For partners, the Rubrik/Sophos integration will open up new ways to support customers with an offering that is directly aligned with today's threat landscape.

Rubrik and Sophos share a commitment to helping organizations operate with confidence in the face of risk. Together, we are raising the bar for Microsoft 365 resilience.

To learn more or enable the integration, contact your Sophos sales team.

Safe Harbor Statement

Any unreleased services or features referenced in this document are not currently available and may not become generally available in a timely manner or at all, as may be determined in our sole discretion. Such referenced services or features do not constitute promises of delivery, commitments or obligations of Rubrik, Inc. and shall not be incorporated into any agreement. Customers should make their purchasing decisions based on services and features that are currently generally available.