That is how most business owners find out their systems have been compromised. Not because money went missing, not because files were encrypted, but because someone who trusted them called to ask what was going on.
Maybe the price has jumped well beyond inflation, the tier you have paid for since the beginning is being retired, or the one-time license you bought years ago now requires a subscription just to keep functioning.
The more interesting problem is what the machine holds. Every person who has ever logged into a system from that computer and clicked “remember me” has left a credential sitting in the browser.
Most small businesses do have some form of backup. The problem is not that they have nothing but that what they have has never been verified.