The log4j vulnerability was used to nail hosted UKG/Kronos payroll systems with Ransomware. They’re saying it could take a couple of weeks to restore. (Poor disaster recovery if you ask me. Their replication servers must have also been hit.) Backup administration is actually my primary job, and if my VMware guests get hit, I have an RPO of a few hours, with a two month lookback window for a nearly instant restore. Crazy they are so screwed.
The U of U uses a hosted Kronos system. It’s f**ked. Departments are quickly putting together Excel sheets to record time. I don’t even know if they know how much accumulated PTO people have anymore.