Cryptovirus hit one of my clients

Got a call from a client today who was having some sort of error with the program/website (WestWind WebConnection). I remoted in to see that EVERY file had been renamed to something like Filename.ext.decrypt12345@qq.com. Told them their IT vendor would have to restore from their last backup (which they said was just hours prior, thankfully).

Ouch. Especially when you're website is used all over the nation and Canada.

If they had been using MySQL/MariaDB/SQL-Server/PostgreSQL/etc instead of a file-server database, this wouldn't have been possible, right?