"According to Citrix, there's no specific data breach or incident behind the move"
Really? If so, why am I dealing with users asking about this then?
"We have been notified this morning of a security incident relating to our support data sharing tool Sharefile, and we have provided their message to us as part of our management of this situation. We have contacted ShareFile and are awaiting further clarification from them, and as their message states they are continuing investigations into the incident."