MoveIT Transfer is used across the US Government as a recommended solution and all of them were vulnerable (and in many cases still are as many orgs haven’t patched yet).
The vendor has done a really good job responding to this btw.
It’s probably going to get spicy.
