Sort:  

We do. However, the incident began the same day cold storage backups were supposed to be taken. Which are on a monthly basis. Unfortunately, our system wasn't able to backup the backup for the last month.

As stated multiple times the hacker knew where to act and when to make sure no data was safe.

On the bright side knowing it was someone with access makes the suspect list much smaller.