Hacker News Reader

That didn't make sense to me. What did negotiating actually buy them? I don't see any indication that the attackers paused the attack.

Little to gain in restoring from backup if the same attack vector is still open. So it was really just a bit of misdirection.

It bought them time to figure out the root cause, fix it, and check if restoring backups is a viable option. Smart play.