They will just do a rollback and act like nothing happened,

The hacker was too slow to move the assets out of the System before it was shut down.