Cybersecurity incident
Date: 2023-06-27 00:00:00
Affected organization: JumpCloud
Affected country: United States of America
Industry: Information
Event type: Exploitive
Event subtype: Exploitation of End User
Motive: Political-Espionage
Actor: NGB 3rd Technical Surveillance Bureau
Actor type: Nation-State
Actor country: Korea (the Democratic People's Republic of)
Description: JumpCloud, a US-based enterprise software firm notifies several customers of an "ongoing incident" and as a caution, the company invalidates existing admin API keys to protect its customer organizations. Few days later, the breach is traced back to North Korean state-sponsored actors from Lazarus Group.