The on-premises versions of Sage's X3 server software suite were running on more than 20 unsecured databases that were under the control of Sage clients, according to Chris Vickery.
Massive quantities of business records in the form of PDFs, DOCs, and XLS spreadsheets were stored on some of these servers.
When contacted, the Sage personnel made it very apparent that, despite the company's claim that it was not responsible for these breaches, they were extremely worried about any scenario in which clients used their software in an unsafe manner.
Following an immediate analysis of the IP addresses provided by Vickery, Sage started the process of alerting the concerned customer organizations that had been using Sage's X3 server software insecurely.
Source: https://mackeeper.com/blog/data-breach-reports-2016/
"id": "SAG45021823",
"linkid": "sage-software",
"type": "Breach",
"date": "07/2016",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"