The Blue Yonder SaaS ransomware incident is bad.

They got into their Private Cloud environment at hypervisor level, deleted the DR and backup storage, then encrypted all 5 datacenters.