Sensitive data types in Veeam Backup & Replication and Veeam Backup for Microsoft 365 log files

When you open a support ticket, Veeam Customer Support specialists may request log files. These log files may contain information to which the terms of the data protection laws or internal company policies apply.

Veeam Backup & Replication log files may include the following types of sensitive data: 

• User names.
• Object names specific to a customer's infrastructure, such as hosts, datastores, VMs, and clusters.
• VM file names and paths.
• FQDN/Hostname or NetBIOS names.
• IP addresses (IPv4 and IPv6).
• Customer-specific paths to backup files.
• Names of backup files.
• File copy information, such as customer-specific paths and file names.
• File-to-tape information, such as customer-specific paths and file names.
• SharePoint information, such as database names, database paths, and SharePoint site URLs.
• Exchange information, such as database names and database paths.
• Microsoft SQL information, such as database and instance names, and database paths.
• Oracle information, such as database names, home names, Oracle SIDs, database global names, and database paths.
• MongoDB information, such as replica set/database/collection names, file paths, and users.
• SAP HANA information, such as database names.
• PostgreSQL information, such as database and instance names, database paths, and users/owners.
• Query execution results from Microsoft SQL, Oracle, MongoDB, SAP HANA, and PostgreSQL.
• SSH host fingerprints.
• SSH scripts and commands output.

 

Veeam Backup for Microsoft 365 log files may include the following types of sensitive data:

• User names and user IDs.
• Object names specific to a customer's infrastructure, such as hosts and their hardware configurations, local data storage, and object storage repositories.
• FQDN/Hostname or NetBIOS names.
• IP addresses (IPv4 and IPv6).
• Customer-specific paths to backup files.
• Path to the Veeam license file and license information.
• Certificate thumbprints.
• Azure AD application name, ID, and assigned permissions.
• Assigned Microsoft Office 365 roles.
• SharePoint and OneDrive information, such as SharePoint IDs, SharePoint site URLs, SharePoint hierarchy, file names, SharePoint list names, site collection membership, information about existing sharing links, and SharePoint settings.
• Exchange information, such as addresses of user mailboxes, mailbox IDs, mailboxes hierarchy, subjects of the Exchange items (for example, Email, Calendars, Meetings), and their modification date.
• Groups information: such as group membership, group mailbox address, and group owner address.
• Teams information, such as team names, channel names, names of backup files, members of a team and their roles, and channel settings. 
• Exported data information, such as customer-specific paths and names of files.
• Microsoft Graph raw api requests and responses, and their headers.
• PostgreSQL host addresses, instances, DBs, usernames.
• PostgreSQL query results.
• NATS addresses and usernames.
• SSH host fingerprints.
• SSH scripts and commands output.