Cybercriminals accessed the cache of files by hacking a maintenance and construction contractor, reports have said.