The Blue Yonder SaaS ransomware incident is bad. They got into their Private Cloud environment at hypervisor level, deleted the DR and backup storage, then encrypted all 5 datacenters.