I am sure that backups can and have been hacked, the actor could have backdoors that you backup in your backup.