O.o  Was there no backup of data or balances that they could refer back to?

As you say, leaving this down to the reports from members of their balances prior to the attack opens up a huge potential for them to be defrauded