Backups are no longer a cure-all. Because now the attackers threaten to publish the data.