Thinking about it, this is probably what happened.
1: they turned off read+write access Settings.php file to shut it down
2: they backed up the directory
3: they copied the directory back, but without changing the permissions on that file first -- this zeroed out the file.
