A significant minority of victims disclosed thus far do not appear to be direct users of MOVEit Transfer and had their data stolen via a third-party provider.
Article Link: https://cms.cyberriskalliance.com/analysis/vulnerability-management/the-tail-of-the-moveit-hack-may-be-longer-than-we-realize