Re: "This has nothing to do with the cloud..."
Even if they had substantial and appropriate backups, there still would have been massive disruption to their business and their customers. Arguing that it has nothing to do with the cloud ignores this point.
I think the other important point is the lack of layered security - a single login portal is surely a major flaw, though I don't know if that is 'cloud typical' or not.