It works the same way for backups

from here

So Baltimore failed to protect themselves against a ransomware attack and apparently they're now planning to fail again. I'm not sure there's any other way to interpret getting insurance equal to the cost of recovering unless you think you're going to need to recover again.

And you know what, $20M would buy a lot of backups.