The hackers group called 'APT10' have hacked into service and cloudproviders to attack organizations in the U.S., Japan, Great Britain and India. PWC and BAE Systems have reported the attacks. 

The first step the group would take was to hack into a serviceproviders, after which they would use the service provider's system to search for targets. These targets were approached through the network of the provider. Confidential information was acquired and sent back to the hackers through the network of the service provider. PWC and BAE have not yet stated which cloud and serviceproviders were hacked. 

A serviceprovider is an interesting target for attackers, because these companies have a broad range of clients. These clients are usually directly connected to the serviceprovider, which makes it easier for attackers to undertake action to many different kinds of organizations. Attackers seem to take their focus to providers of these services as governments are enhancing their defense mechanisms.