Ransomware continues to pose a major threat to companies today. However, the fact that it is also possible to stop an encryption is demonstrated using a case study from practice. The focus is on early alerting, the immediate measures taken and what other companies can learn from this. What matters is good preparation for the eventuality, the implementation of targeted measures and appropriate exercises. These points can help increase a company's cyber resilience. After all, it is never too late to invest in cyber security, even if the dangers seem to be omnipresent.