https://krebsonsecurity.com/2020/02/hackers-were-inside-citrix-for-five-months/

“Citrix said the information taken by the intruders may have included Social Security Numbers or other tax identification numbers, driver’s license numbers, passport numbers, financial account numbers, payment card numbers, and/or limited health claims information, such as health insurance participant identification number and/or claims information relating to date of service and provider name.”

Pretty crazy that they were inside for that long. The FBI were the ones who had to tell Citrix they’d bee pwned.