# Who is targeting business process outsourcing organisations?

> Public reporting links 2 threat groups to attacks on business process outsourcing organisations, part of the professional and Business Services industry, including APT41 and BRONZE SPRING. One of them is thought to have state backing. This page lists them and where they are thought to operate from, so you can see who might come after a business like yours.

Canonical page: https://www.edgeprotect.io/sub-industries/business-process-outsourcing
Breadcrumb: [Home](https://www.edgeprotect.io/) > [Industries](https://www.edgeprotect.io/industries) > [Professional and Business Services](https://www.edgeprotect.io/industries/professional-business-services) > Business process outsourcing

## At a glance

| Fact | Value |
|---|---|
| Threat groups linked | 2 |
| Related sectors with groups | 2 |
| Suspected state backing | 1 of 2 |
| Countries of origin | 1 |
| Part of | Professional and Business Services |

## Which groups target business process outsourcing organisations?

| Group | Thought to operate from | Suspected state backing | Profile |
|---|---|---|---|
| APT41 | China | People's Republic of China | https://www.edgeprotect.io/threat-actors/apt41 |
| BRONZE SPRING | China | No | https://www.edgeprotect.io/threat-actors/bronze-spring |

## Where are they thought to operate from?

- China: 2

## Other sectors in professional and Business Services

- [Legal services](https://www.edgeprotect.io/sub-industries/legal-services): 5 groups
- [Human resource services](https://www.edgeprotect.io/sub-industries/human-resource-services): 1 group (also called professional services, employment services, event services)

## Frequently asked questions

### Which threat groups target business process outsourcing organisations?

Public reporting links 2 threat groups to attacks on business process outsourcing organisations, including APT41 and BRONZE SPRING.

### Where are these groups thought to operate from?

Most are thought to operate from China (2). 1 of the 2 are thought to have backing from a government.

### Which industry is business process outsourcing part of?

Business process outsourcing sits within professional and Business Services. The industry page lists every group linked to the wider sector.

### How can I check my own organisation's exposure?

Create an account and tell us the software you run. We match it against known flaws, rank each one from 0 to 100 using evidence it is being exploited, let you know as soon as something changes that affects you, and show which groups and ransomware gangs are hitting your sector.

## Check whether it matters to your business

A free EdgeProtect account (no card needed) matches the software you run against known flaws, including those linked to threat groups, ranks each one from 0 to 100 and tells you as soon as we spot something that affects you. It also shows which threat groups and ransomware gangs are hitting your sector, with profiles of over 900 groups and a PDF dossier for each.

- Start free: https://www.edgeprotect.io/register
- Book a demo: https://www.edgeprotect.io/contact