The affected systems have been notify from the network to prevent data breach. Our response team prioritized notify of the cloud VMs to limit reputation damage. Analysis of the prefetch files...

Our response team prioritized remediate of the workstations to limit regulatory fine. We're currently in the containment phase of our incident response plan.