386
No backup, no mercy
(feddit.org)
Who could have guessed that having tested, well protected and current backups help when dealing with cyber security incidents?
No, you didn’t meet a reasonable RPO, which is the amount of time between the security incident and a full recovery. Usually with full backups the goal is to get everything back up and running within 24-48 hours, which is pretty much only possible if you have adequate backups to take a “nuke it and rollback” approach