Citrix denies allegations that the company’s network was breached by a malicious actor who also claims that he was able to steal customer information. The actor is now selling what he claims to be a database with information on 2,000,000 Citrix customers on the dark web, with a price tag of 2.15 bitcoins (roughly $19,700) Citrix found no evidence of network compromise but, instead, the threat actor stole data from the breached network of a third party. The third-party whose systems were compromised to steal Citrix data has now started its own investigation and is taking remediation measures.
Source: https://www.bleepingcomputer.com/news/security/citrix-no-breach-hacker-stole-business-info-from-third-party/