[phpisthebest]

The biggest problem here is for former customers.

What if you closed your account 5 years ago, did they still have backups?

[sedatk]

"Assume total breach" implies to update everything you had with them regardless of the timeframe.

[phpisthebest]

I assume for many people that is easier said than done

[sedatk]

It is, hence the gravity of the situation.