Information technology company Kaseya confirmed Friday that its "VSA" software had been targeted but said it had limited the attack to "a very small percentage of our customers" who use the tools.