If they are _determined_ to use your data, they will have backed up before they announced this and saved it off somewhere. Normal backup mechanisms won't get the job done, though, because they typically age out. GDPR and CCPA both require backups to explicitly not allow for restoration, although of course they could ignore both.