According to this report, some Chinese hackers specifically target IT service providers, because they can use such service providers as a spring board to hack their customers. This makes total sense, and means that the IT department of enterprises who want to outsource their IT operations must conduct plenty of due diligence of the service provider's cybersecurity posture.


https://www.washingtonpost.com/world/national-security/us-and-more-than-a-dozen-allies-to-condemn-china-for-economic-espionage/2018/12/20/cdfd0338-0455-11e9-b5df-5d3874f1ac36_story.html?noredirect=on&utm_term=.4bbcd70aed11