Okta

Okta Customer Support Security Breach Update: All Clients Using Help Center Impacted, Contact Info for All Certified Users Stolen

December 5, 2023

An update from Okta on its October customer support security breach indicates that the damage is worse than initially expected, with all of the recent users of its Help Center service now being told that the attackers likely stole their uploaded files.

Security lock on computer keyboard showing Okta security breach

Cyber Security News

Okta Security Breach Report: 134 Clients Impacted, Including Cloudflare and 1Password

November 16, 2023

The final report on the Okta security breach indicates that the attackers were able to access HAR files containing session tokens of 134 customers, but it appears they were very selective in which they chose to pursue follow-up attacks on. Only five instances of successful session hijacking were logged.

Hacker's hand holding lock showing Okta support system security breach

Cyber Security News

Okta Support System Compromised by Cookie Hijacking, Security Breach May Have Exposed Customer Files

October 24, 2023

Attackers were able to steal a session cookie from the Okta support system and access an administrator account, possibly providing them with further access to customer environments in an early October security breach.

Hacker hands at work on code showing Okta source code leak from GitHub Repositories

Cyber Security News

Okta Source Code Stolen in Raid on GitHub Repositories

December 27, 2022

Okta is once again in trouble as the company's GitHub repositories have been hacked. There does not appear to be any impact to Okta clients, but the service source code appears to have been stolen in the breach.

Businessman typing on keyboard laptop computer and holding smartphone showing Okta phishing campaign

Cyber Security News

Twilio Hackers Behind Okta Phishing Campaign That Breached Over 130 Organizations

August 31, 2022

In the roughly five months that the Okta phishing campaign has been active, it has racked up 9,931 login credentials from about 130 organizations. 5,541 included MFA codes, and 3,120 included the victim's email account.

Okta

Okta Customer Support Security Breach Update: All Clients Using Help Center Impacted, Contact Info for All Certified Users Stolen

Okta Security Breach Report: 134 Clients Impacted, Including Cloudflare and 1Password

Okta Support System Compromised by Cookie Hijacking, Security Breach May Have Exposed Customer Files

Okta Source Code Stolen in Raid on GitHub Repositories

Twilio Hackers Behind Okta Phishing Campaign That Breached Over 130 Organizations

Russian Phishing Campaign Targets Messaging App Users to Steal Recovery Keys and Take Over Accounts

“Cyber Shield,” Britain’s Agentic AI Cyber Defense Project, Prepares for the World of Machine-Speed Attacks

Data Breach Hits AssuranceAmerica Exposing Personal Information of Nearly 7 Million People

Data Breach at Aflac Japan Impacts 4.38 Million Customers and Sales Agents