Hardly a "sophisticated" attack...
Deleting Active Directory accounts is hard to come back from without a good AD backup (which everyone should have) - so much is based on the AD Security ID. And of course, all the outlook e-mails and office documents no doubt got deleted when the Office365 accounts were deleted as well.