digraph G {
    node [ shape=box ]



    subgraph cluster_backup_to {
        server [ label="Server" color="#40a9e3", style="filled"]
        backupdevice [ label="Backup\nUSB, NAS, etc..." ]
        attacker1 [ label="Attacker" ]

        label="Backing up FROM the server"

    }

    server->backupdevice [ label="Backs up TO" ]
    attacker1->{server,backupdevice} [ label="Can access/encrypt everything" ]

    subgraph cluster_backup_from {
        backupserver [ label="Backupserver\nNAS, Service @ ungleich, ..." ]
        server2 [ label="Server" color="#40a9e3", style="filled"]
        attacker2 [ label="Attacker" ]
        label="Backing up from ANOTHER server"
    }

    attacker2->server2 [ label="Can only encrypt the server" ]
    backupserver->server2 [ label="Backs up FROM" ]
}