JumpCloud Reports Cyber Incident Affecting Some Customers

JumpCloud, a provider of cloud-based identity and access management solutions, has reported an “ongoing cyber incident” that has affected some of the company’s customers. As a result, in order to protect valuable data, JumpCloud was forced to reset the API keys of all affected customers.

JumpCloud’s Active Directory Services

JumpCloud’s Active Directory (AD) cloud services are used by more than 180,000 organizations worldwide, and many software and cloud service providers have integrated their systems with JumpCloud products.

Impact of Resetting API Keys

The company informs customers that resetting API keys will break some features, including AD import, HRIS integration, JumpCloud PowerShell modules, JumpCloud Slack apps, Directory Insights Serverless apps, ADMU, 3rd party MDM packages, Command Triggers, Okta SCIM integrations, Azure AD SCIM, Workato, Aquera, Tray and more.
At the same time, the developers assure that key reset is carried out for the benefit of customers, and are ready to provide support to anyone who needs help resetting and recovering API keys.
In the letters, the company urges customers to immediately change all API keys to improve the security of their systems. To help with this, JumpCloud has published a detailed guide and even an interactive simulation on their website.

Details of the Incident

Details regarding the specifics and scale of the incident itself are currently unknown, but JumpCloud representatives report that the company is actively working to resolve the situation.
JumpCloud is a cloud-based identity and access management provider that is used by over 180,000 organizations worldwide. Recently, the company reported an “ongoing cyber incident” that has affected some of their customers. As a result, JumpCloud was forced to reset the API keys of all affected customers in order to protect valuable data.
The resetting of API keys will break some features, including AD import, HRIS integration, JumpCloud PowerShell modules, JumpCloud Slack apps, Directory Insights Serverless apps, ADMU, 3rd party MDM packages, Command Triggers, Okta SCIM integrations, Azure AD SCIM, Workato, Aquera, Tray and more. However, the developers assure that key reset is carried out for the benefit of customers, and are ready to provide support to anyone who needs help resetting and recovering API keys.
In order to improve the security of their systems, JumpCloud is urging customers to immediately change all API keys. To help with this, JumpCloud has published a detailed guide and even an interactive simulation on their website.
At this time, the specifics and scale of the incident are still unknown. However, JumpCloud representatives report that the company is actively working to resolve the situation.