Did that happen to a lot of companies during the log4shell fiasco? I'm sure some companies had their permissions misconfigured in a way such that a malicious actor who could execute code on their servers could also drop their database and delete their backups.
Imagine if an AI can infiltrate your SaaS database and delete your entire database and every single backup. The business is dead immediately.