While ransomware caused massive issues with the Kronos Public Cloud, delaying payroll for customers in mid-December, UKG later determined that the threat actors accessed the cloud environment earlier and stole corporate data before executing the ransomware. As a result, several data breaches related to the Kronos attack have been disclosed or reported over the last two months.