A computer implemented method comprising: receiving, by a backup server computer, a backup request from a client computer (110a - 110c) to backup first data, wherein the backup server computer is coupled to the client computer via a first network, wherein the backup server computer is further coupled to a remote server computer (120a, 120b) via a second network; in response to the backup request: encrypting, by the backup server computer, the first data as one or more encrypted segments, each having an encrypted segment size; and conveying, by the backup server computer, the one or more encrypted segments to the remote server computer for storage on a storage medium; and the method further comprising: receiving, by the backup server computer, a restore request from the client computer (110a - 110c) for second data which corresponds to a given encrypted segment, the second data having a size less than the encrypted segment size; in response to the restore request: requesting, by the backup server computer, transmission from the remote server computer of a portion of the given encrypted segment, wherein the requested portion includes a first one or more encrypted sub-segments beginning from an initial encrypted sub-segment of the given encrypted segment, and wherein the requested portion does not include a second one or more encrypted sub-segments of the given encrypted segment subsequent to the first one or more encrypted sub-segments; and receiving, by the backup server computer, the requested portion of the given encrypted segment. receiving, by a backup server computer, a backup request from a client computer (110a - 110c) to backup first data, wherein the backup server computer is coupled to the client computer via a first network, wherein the backup server computer is further coupled to a remote server computer (120a, 120b) via a second network; in response to the backup request: encrypting, by the backup server computer, the first data as one or more encrypted segments, each having an encrypted segment size; and conveying, by the backup server computer, the one or more encrypted segments to the remote server computer for storage on a storage medium; and the method further comprising: receiving, by the backup server computer, a restore request from the client computer (110a - 110c) for second data which corresponds to a given encrypted segment, the second data having a size less than the encrypted segment size; in response to the restore request: requesting, by the backup server computer, transmission from the remote server computer of a portion of the given encrypted segment, wherein the requested portion includes a first one or more encrypted sub-segments beginning from an initial encrypted sub-segment of the given encrypted segment, and wherein the requested portion does not include a second one or more encrypted sub-segments of the given encrypted segment subsequent to the first one or more encrypted sub-segments; and receiving, by the backup server computer, the requested portion of the given encrypted segment. encrypting, by the backup server computer, the first data as one or more encrypted segments, each having an encrypted segment size; and conveying, by the backup server computer, the one or more encrypted segments to the remote server computer for storage on a storage medium; and receiving, by the backup server computer, a restore request from the client computer (110a - 110c) for second data which corresponds to a given encrypted segment, the second data having a size less than the encrypted segment size; in response to the restore request: requesting, by the backup server computer, transmission from the remote server computer of a portion of the given encrypted segment, wherein the requested portion includes a first one or more encrypted sub-segments beginning from an initial encrypted sub-segment of the given encrypted segment, and wherein the requested portion does not include a second one or more encrypted sub-segments of the given encrypted segment subsequent to the first one or more encrypted sub-segments; and receiving, by the backup server computer, the requested portion of the given encrypted segment. requesting, by the backup server computer, transmission from the remote server computer of a portion of the given encrypted segment, wherein the requested portion includes a first one or more encrypted sub-segments beginning from an initial encrypted sub-segment of the given encrypted segment, and wherein the requested portion does not include a second one or more encrypted sub-segments of the given encrypted segment subsequent to the first one or more encrypted sub-segments; and receiving, by the backup server computer, the requested portion of the given encrypted segment.