By "lost" I mean, it might have been broken, commandeered, exfiltrated.

This is PHP world; it may be a share nothing architecture, but it's full of long-running VMs and very long-running apps.

I think calling private data "lost" if it is accessed is not a misnomer, even if you have backups.

You lost its privacy