Backups are an essential part of the solution. However, for this case, one also needs the infrastructure, on isolated standby, to automatically revert every impacted device asap to stop the bleeding.

Didn't a company with backups recently pay because they realized restoring would take months?