The U.S. Census Bureau lagged in its discovery and reporting of the attack after it happened, a government watchdog organization found. Officials were informed of the Citrix flaw in its servers and had at least two opportunities to fix it before the attack, investigators found. The bureau also made mistakes after the attack by not discovering nor reporting the incident in a timely manner, the OIG found. Citrix products affected by the flaw are used for application-aware traffic management and secure remote access. At least 80,000 organizations in 158 countries use these products.”]
Source: https://threatpost.com/postmortem-on-u-s-census-hack-exposes-cybersecurity-failures/168814/