GoTo says an attacker stole some encrypted customer backups as well as an encryption key for some of those databases.