The fact that data didn't get deleted is irrelevant if the customer can't actually get at that data.

That the customer got unlocked is of course a good thing, but for at least 30 hours the customer couldn't access their data, that's highly problematic.