If an organisation outsources its backups to another provider, attacks on this provider can also affect the organisation's data. This can lead to an outflow of sensitive data.

There is also a risk that unfavourable contractual conditions will result in backups not being available at short notice. This would make it impossible to restore them within a defined period of time in an emergency.