Volume/Folder Encryption for Active Backup O365

Synology
1

I use Active Backup for Microsoft O365. It backs up all our Azure data. We are looking to ensure all data is secure in the event of a hack. However I have discovered that I created the volume I used to store backup data was done without encryption. I know this cannot be done retrospectively.

I have two questions:

  1. The Shared Drive setup for this backup job was also setup without encryption. Is it possible to encrypt this drive retrospectively without the loss of any data?
  2. If what I propose in question 1 is also not possible, then is it feasible for me to purchase an expansion unit with a new encrypted volume that I could migrate data from the old unencrypted drive onto? Would this work?

I would appreciate any advice on above.

2

Define ‘hack’. Why? If you refer to an online breach, not physical access, volume encryption will not help.
Volume encryption requires key management. I have already seen users who did not understand the key management procedures and lost access to their data. Forever. Think twice before implementing volume encryption or any form of encrypted storage.
Encryption for data in transit is an entirely different story.