Were there backups of the source code? The article seems to indicate code corruption on the application hosts, which would also indicate a VCS restore would hav

Were there backups of the source code? The article seems to indicate code corruption on the application hosts, which would also indicate a VCS restore would have reverted the systems to the state prior to the attack. OTOH backups that cannot be used to restore service are by definition, not backups.