Backup, Backup always remember to backup ... If he doesn't get the site back, He's gonna have lots of problems with refunds
DDoS only prevents people from accessing your site. The actual data should be intact. But given the number of sponsors he had, I'm sure they might be willing to spend resources to find and prosecute the person(s) responsible for damaging their advertising.