Data protection in a networked computing environment

A system for providing data protection in a networked computing environment, comprising:

• at least one computer device in the networked computing environment, the at least one computer device comprising:
• a hardware processor, a computer readable memory, and a computer readable storage medium;
• program instructions to detect a breach of a first production system in the networked computing environment;
• program instructions to, in response to the detecting the breach of the first production system, generate a second production system in the networked computing environment, wherein the second production system includes a patch based on the breach;
• and
• program instructions to convert the first production system to a decoy system,
• wherein the first production system and the second production system are logically separate, and
• wherein the at least one computer device further comprises program instructions to, in the generating the second production system in the networked computing environment:
• provision a new production server and a new production database in the networked computing environment;
• and
• apply the patch to at least one of the new production server and the new production database,
• the second production system includes a database which includes a scrambled version of low value data,
• the patch is a configuration update applied to the database of the second production system, and
• the scrambled version of the low value data is encrypted.

A system for providing data protection, comprising:

• a networked computing environment comprising:
• a first system comprising:
• a first database;
• a first server comprising a first hardware processor, a first computer readable memory, and a first computer readable storage medium;
• and
• program instructions to serve an application;
• and
• a second system comprising:
• a second database;
• a second server comprising a second hardware processor, a second computer readable memory, and a second computer readable storage medium;
• and
• the program instructions to serve the application,
• wherein:
• the second database comprises valid data;
• the first database comprises a modified version of the valid data;
• the second system comprises a patch that eliminates a vulnerability exposed by a breach detected in the first system;
• and
• the first system and the second system are logically separate,
• the second database includes a scrambled version of low value data,
• the patch is a configuration update applied to the second database of the second production system, and
• the low value data comprises non-confidential data.