What fascinates me is that right now there is a battle between Wordpress and Drupal on "whom to blame". There are many posts around suggesting it's the "Drupalgeddon" vulnerability was the case www.drop-guard.net/blog/drupalgeddon-panama-papers Really curious if we find it out sometimes :)