Expire recovery points
When a recovery point is expired, an image cleanup operation is triggered from the primary server. This operation also cleans up the volume snapshots, which are part of the recovery point.
Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist