What they did was stupid. But I don't think they expected someone to break into their servers and destroy all their data for absolutely no reason. They probably saw no reason to take enterprise level backup precautions.