Backups could be stored on other servers or even in private vaults not connected to the network. Guys there not stupid worked, and even if as it is involved in the fraud, clearly aware of what he was doing