Moral of the story:
A) Should have had proper off-site backups
B) Should have had better retention policies
C) Should have had at restore testing system (clearly they did not)
D) Should have fired whoever (person or company) poorly advised or didn't address the above
Case closed.