2 ms·

They don't explain exactly how, but yes the attacker did find a database backup. Apparently the production systems were not accessed.