That's also my question. In general, can someone explain why offsite, offline, multi-timescale backups don't help in these cases? Yes I get that insurance paid

That's also my question. In general, can someone explain why offsite, offline, multi-timescale backups don't help in these cases? Yes I get that insurance paid the extortion, but besides just capitulating, why doesn't restoring from backup work, assuming you can spot the vulnerability that caused the ransomware attack?