Mandiant Consulting reported that the attack on the SaaS provider tracks to TraderTraitor, a financially motivated North Korean group that targets blockchain companies.
Article Link: https://cms.cyberriskalliance.com/news/cloud-security/north-korean-threat-group-targeted-jumpcloud-saas-provider-customer