With the recent CDK outage, it's broadly believed that they had no backups and resorted to paying the ransom on #ransomware in order to get a key and get their data restored.
Someone proposed the idea that they might have been breached, had the data stolen and paid a blackmailer to keep them from releasing the data into the wild.
Does this story make sense?
Why or why not?