Take Stricter Measures To Prevent Spam
Also, make sure IT is taking backup of entire dstabase on lets say weekly bases and they have tested dstabase recovery in a sandbox environment @Umer25 @Farhan (some suggestions above)