A breach of critical information can occur just as easily from a backup file as it can from the production database. Backup databases should be secured in accordance with the sensitivity of the information they contain, security expert says. A quarter of organizations don’t encrypt backup databases at all or don’t even know whether they encrypt any backup databases. In critical systems with little margin for downtime — often the very same systems that contain the most sensitive information — are pressed into configuring backups for rapid recovery in the disaster situations.”]
Source: https://www.darkreading.com/database-security/backup-databases-the-data-security-achilles-heel