They explicitly mention that they have backups, but that the "backups are fucked", whatever that means. Ransomware scenarios come to mind, where the attackers

They explicitly mention that they have backups, but that the "backups are fucked", whatever that means. Ransomware scenarios come to mind, where the attackers will look for and actively destroy the backups you have if they are remotely accessible with e.g. AD admin credentials, and only trigger the ransomware when the backups are gone. If you have offsite backups in some cloud system, that helps you against natural disasters but not against malicious activity. The need for backups that are not just offsite but also offline is somewhat recent and very, very many companies do not have them.