Security News > 2023 > November > Okta: October data breach affects all customer support system users

Okta's investigation into the breach of its Help Center environment last month revealed that the hackers obtained data belonging to all customer support system users.

The company notes that the threat actor also accessed additional reports and support cases with contact information for all contact information of all Okta certified users.

Further investigation of the attack revealed that the threat actor also "Downloaded a report that contained the names and email addresses of all Okta customer support system users."

"All Okta Workforce Identity Cloud and Customer Identity Solution customers are impacted except customers in our FedRamp High and DoD IL4 environments. The Auth0/CIC support case management system was also not impacted by this incident" - Okta.

The company states that the intruders also accessed data from "Okta certified users and some Okta Customer Identity Cloud customer contacts" along with Okta employee details.

"We also identified additional reports and support cases that the threat actor accessed, which contain contact information of all Okta certified users and some Okta Customer Identity Cloud customer contacts, and other information. Some Okta employee information was also included in these reports. This contact information does not include user credentials or sensitive personal data" - Okta.

News URL

https://www.bleepingcomputer.com/news/security/okta-october-data-breach-affects-all-customer-support-system-users/