Security News > 2023 > November > Okta: October data breach affects all customer support system users
Okta's investigation into the breach of its Help Center environment last month revealed that the hackers obtained data belonging to all customer support system users.
The company notes that the threat actor also accessed additional reports and support cases with contact information for all contact information of all Okta certified users.
Further investigation of the attack revealed that the threat actor also "Downloaded a report that contained the names and email addresses of all Okta customer support system users."
"All Okta Workforce Identity Cloud and Customer Identity Solution customers are impacted except customers in our FedRamp High and DoD IL4 environments. The Auth0/CIC support case management system was also not impacted by this incident" - Okta.
The company states that the intruders also accessed data from "Okta certified users and some Okta Customer Identity Cloud customer contacts" along with Okta employee details.
"We also identified additional reports and support cases that the threat actor accessed, which contain contact information of all Okta certified users and some Okta Customer Identity Cloud customer contacts, and other information. Some Okta employee information was also included in these reports. This contact information does not include user credentials or sensitive personal data" - Okta.
News URL
Related news
- Fintech giant Finastra notifies victims of October data breach (source)
- US drug testing firm says data breach impacted 3.3 million people (source)
- US drug testing firm DISA says data breach impacts 3.3 million people (source)
- Background check, drug testing provider DISA suffers data breach (source)
- Data breach at Japanese telecom giant NTT hits 18,000 companies (source)
- PowerSchool previously hacked in August, months before data breach (source)
- Western Alliance Bank notifies 21,899 customers of data breach (source)
- Sperm donation giant California Cryobank warns of a data breach (source)
- Pennsylvania education union data breach hit 500,000 people (source)
- StreamElements discloses third-party data breach after hacker leaks data (source)