The journalist speculated about "evidence that the files were actually deleted" referring to the "hackers" deleting their copies of the extracted data.

Really? Evidence of deletion?