the decision meant accepting the loss of three months worth of sales data from one infected server
"Recovers?" Sounds more "gives up and moves on." But good on them for not paying the scammers.
They can probably recreate most of the sales data from credit card transaction logs and their customers' records, anyway.