It is bizarre to me that servers are considered something to be “lost” in this day and age. They should as borderline ephemeral as us.
I think calling private data "lost" if it is accessed is not a misnomer, even if you have backups.
You lost its privacy
By "lost" I mean, it might have been broken, commandeered, exfiltrated.
This is PHP world; it may be a share nothing architecture, but it's full of long-running VMs and very long-running apps.