A friend told me one of their company servers got recently hacked. The server was super secured software side.
It turned out the attacker called the hoster and used some social engineering skills to reset the root password (with a live cd or custom image??) (or whatever happend, it is not exactly clear.). The company got a few days later a bill of the phone call for the technical support.
The server contained a database with usernames and balance. So, one with access to the server could theoretically increase or add balance to his account and cash it out.
As far as I know the server was rebooted several times.
Question: Is there a way to harden or fully prevent such a scenario? I have sensitive data as well on my server and I plan to use VeraCrypt to store my database. The mounted device would shutdown when the server is rebooted.