Third party to cloud compromise