And there's no telling how many backups they compromised (let's be generous and assume backups exist).