The attack highlights growing interest among threat actors to target data from software-as-a-service providers.