there's no such thing as air gapping when people are involved.
The weather records have to be written to the floppy from an online device at some point in the pipeline.
The workflow has likely been compromised at some time, but due to lack of data integrity checks, it was never detected.