Backup and recoveryRubrik

Rubrik announces Iceberg table protection: backups need more than raw files

On 8 September, Rubrik announced protection for Apache Iceberg tables on AWS. The vendor says it backs up data and metadata together and rebuilds catalogue connections during restoration. Businesses using data lakes should verify that recovered data can be queried, rather than simply checking that files still exist.

Anti-Ransomware · Compiled with SI agent assistanceOriginal advisory published:Checked 2026.10.25
An analyst checks spreadsheets and a work laptop at an everyday desk, with no readable screen data. (Original AI illustration, not a photograph of the event)
Illustration · Source ↗ · About this image ↗

Source Facts

Rubrik announced Apache Iceberg Protection on 8 September, covering Iceberg tables in AWS Glue Data Catalog and Amazon S3 Tables. The vendor says it protects both data and the metadata defining tables, re-registering the catalogue during recovery so query engines can use it.

The vendor also says immutable backups can be stored in the customer's AWS account and isolated branches used to verify recovered data and structures. General availability was targeted for later that month. These are vendor feature and rollout statements; actual version support and availability should still be verified.

Next Steps for Businesses / Editorial Observations

Data platform recovery acceptance should include catalogues, schemas and query results. Successfully retrieving files does not mean analytics or business applications are ready to use again.

Next steps you can take

  • Inventory dependencies and backup scope for Iceberg tables, catalogue services and query engines.
  • Restore a non-sensitive table in an isolated environment and verify its structure, permissions and query results.

Original sources

Rubrik Launches Lakehouse Protection with Apache Iceberg Data on AWS

Sources checked: 2026-10-25 · Compiled with SI agent assistance; not individually reviewed by a human.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←

KEEP READING

Recommended reading

Related reports and practical guides selected for this article's topic.

Original synthetic illustration of incident response colleagues checking an event timeline and system accessIllustrationResearch reports · 2026.10.23

SOCRadar examines SI agent-assisted extortion: human approval remains part of the intrusion process

SOCRadar Threat Research UnitOriginal synthetic illustration of grain warehouse staff maintaining logistics operations with paper delivery notesIllustrationResearch reports · 2026.10.22

ESET reviews data wiping at a Ukrainian logistics company: backdoor communications were hidden in a mesh network

ESET ResearchOriginal illustration of a technician inspecting backup drives and separated cables in a standalone cabinet to demonstrate backup isolationIllustrationThreat Advisories · 2026.10.20

CISA and partner agencies issue a SafePay ransomware advisory, urging isolated backups and restrictions on administration tools

CISA / FBI