Rackspace says no signs of attacker activity since December 2

Rackspace said that, as it continues working to bring its remaining customers back online, it wants to reiterate some additional information around the measures it has taken to secure the Hosted Exchange email environment, as well as the status of its investigation into the recent cybersecurity incident. "As soon as we detected suspicious activity, we followed our incident response plans, acting immediately to contain the threat," the company said via Twitter. "There have been no signs of attacker activity in the environment since December 2 and no evidence that the attackers were able to move laterally. We can confirm this was a financially motivated threat actor. We’re working with CrowdStrike, other cybersecurity experts, and federal authorities to finalize the investigation as expeditiously as possible, at which then we can share more information with you all. We appreciate your patience as we conclude these important investigations." Reference Link