It's not getting tagged with ransomeware thats the faceplant.
It's the potentially weeks long recovery window.
If you claim to be a cloud company, you should be able to restore services in less than 48 hours, even if your entire company burned to the ground after repeatedly being struck by lightning.
Clearly, their backup systems either got hit, or weren't suitable for purpose.