They probably have insurance for things like this. Speculation, but still. Lots of businesses mitigate risk by just buying insurance.

Insurance for cyber incidents usually only cover you if you took reasonable measures. Like not exposing your internal systems to the Internet.

If someone walks in and unplugs your refrigerator and causes you to lose all the stock in it, your insurance is going to cover you. You don’t need to show you locked the power sockets.