Well, you can only do so much damage, as incremental backups is pretty common place now on about every server system. I mean they likely didn't get the backups...

It’s believed that the exploit had been used and the systems breached back in the spring of this year.

and you know all this how?