Cybersecurity attacks surged dramatically in 2025, and Microsoft has been among the high-profile targets. Research indicates that 70 percent of Microsoft 365 tenants have experienced account takeovers, and 81 percent have faced email-based investigations or compromises.
To reduce this ongoing risk, Rubrik and Sophos have formed a strategic partnership to help IT teams strengthen their cyber resilience and simplify recovery from ransomware, compromised accounts, insider threats, and data loss in Microsoft 365.
The joint solution makes Sophos M365 Backup and Recovery, powered by Rubrik, the only Microsoft 365 data protection offering fully integrated into Sophos’s security management console. For customers already relying on Sophos for detection and prevention, this integration delivers fast, secure recovery of SharePoint, Exchange, OneDrive, and Teams data when information is accidentally deleted or maliciously compromised.
Rubrik’s SaaS-based protection will be available through Sophos Central — the same platform security teams already trust to manage their defenses.
Need is greater than ever
By early 2025, commercial Microsoft 365 users surpassed 400 million. If global administrator credentials for even a fraction of those users are compromised, attackers can alter storage settings and permanently delete critical business data.
Built-in Microsoft tools were not designed for cyber resilience at this scale. Litigation Hold is intended for legal discovery, not for restoring massive volumes of enterprise data. The Recycle Bin is limited and short-lived and cannot rewind an entire data estate after an attack. These native features may address some narrow use cases, but they fall short of enterprise requirements and can create a false sense of security.
Recovery must be fast, granular, and reliable at scale. That is where Rubrik enters the picture.
Next-level cyber recovery and resilience
According to Sophos’s The State of Ransomware report, only 54 percent of organizations hit by ransomware relied on backups to restore data; nearly half paid a ransom to recover information, highlighting the ongoing gap in effective cyber resilience practices.
The Rubrik–Sophos integration is designed to close that gap through several core capabilities:
- Immutable, secure backups: Rubrik isolates backups from the Microsoft 365 tenant and protects them with air-gap architecture, WORM-locked immutability, and customer-held encryption keys. Multifactor authentication and intelligent data locks help prevent tampering even if credentials are compromised.
- Fast, flexible recovery: Customers can search for and restore emails, files, folders, shared mailboxes, OneDrive content, SharePoint sites, and Teams channels to their original locations or to alternative destinations. Rubrik supports both active and inactive accounts and delivers high-performance restores using container orchestration via Azure Kubernetes Service.
- Automated protection and compliance: Rubrik automatically discovers new users, sites, and mailboxes, applies policy-driven protection aligned with Entra ID groups, and offers delegated administrative controls. Sophos Central makes this automated protection easy to manage, removing repetitive backup tasks from overloaded administrators.
This capability will be available within Sophos Central—no new interfaces to learn, no extra tools to manage—just a unified experience for both security controls and Microsoft 365 data protection.
Building cyber resilience, together
By partnering with Rubrik, Sophos can empower customers with the tools to quickly and accurately detect, protect, and recover when malicious actors penetrate Microsoft 365 environments. For partners, the Rubrik–Sophos integration creates new opportunities to support customers with solutions tailored to today’s threat landscape.
Rubrik and Sophos share a commitment to helping organizations operate with confidence in the face of risk. Together, they are raising the bar for Microsoft 365 resilience.
To learn more or enable the integration, contact your Sophos sales team.
Safe Harbor statement
Any unreleased services or features referenced in this document are not currently available and may not become generally available on time or at all, at Rubrik’s sole discretion. Such referenced services or features do not constitute commitments, promises, or obligations by Rubrik, Inc., and should not be relied upon in making purchasing decisions. Customers should base purchase decisions on services and features that are presently generally available.