Hacked companies had backup plans. But they didn't print them out before the attack.