Security News > 2023 > November > Okta data breach dilemma dwarfs earlier estimates
Okta has admitted that the number of customers affected by its October customer support system data breach is far greater than previously thought.
In the process of figuring out how the mistake came to be, it also identified additional reports accessed by the attackers, including employee information and the contact details of all Okta certified users and some Okta Customer Identity Cloud customers.
At the end of August, it disclosed a case involving attackers attributed to the Scattered Spider group - thought to be an AlphV/BlackCat ransomware affiliate - phishing Okta customers en masse to gain super admin access to Okta tenants.
Okta's customer support system breach was announced, an incident in which attackers made off with HAR files to replicate genuine customer sessions.
On November 2, the data of just shy of 5,000 current and former Okta employees was exposed to attackers, although this attack was carried out on a third-party provider, Rightway Healthcare, so there's not much Okta could have done to intervene.
Okta is due to release its quarterly earnings later today, a little more than a month after the October breach caused its stock price to plummet.
News URL
https://go.theregister.com/feed/www.theregister.com/2023/11/29/okta_misjudged_breach_scale/
Related news
- Dutch Police: ‘State actor’ likely behind recent data breach (source)
- Comcast and Truist Bank customers caught up in FBCS data breach (source)
- Internet Archive hacked, data breach impacts 31 million users (source)
- Internet Archive data breach, defacement, and DDoS: Users’ data compromised (source)
- Fidelity Investments says data breach affects over 77,000 people (source)
- Fidelity Data Breach Exposes Data of Over 77,000 Customers (source)
- USDoD hacker behind National Public Data breach arrested in Brazil (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Insurance admin Landmark says data breach impacts 800,000 people (source)
- Henry Schein discloses data breach a year after ransomware attack (source)