Okta reveals hit by cyber attack, hackers stole data for all customer support users.
- Hackers gained access to a report containing data on all Okta customer support system users.
- The stolen data includes names and email addresses, potentially putting affected individuals at risk of phishing attacks.
- Okta has urged customers to protect themselves, including implementing strong multifactor authentication.
Okta, a provider of identity services, disclosed on Tuesday that a recent data breach had compromised the information of all users of its customer support system. The breach, which occurred two months ago, allowed hackers to download a report containing the names and email addresses of all clients utilizing the system.
Okta's statement indicated that while the company lacked direct evidence of the stolen data being actively exploited, it had notified all affected customers of the heightened security risk posed by the breach, particularly regarding phishing and social engineering attacks.
Okta's customer base includes major organizations like Microsoft-backed OpenAI, relying on its services to secure logins for online applications and websites through single sign-on and multi-factor authentication mechanisms.
The company's stock price had plummeted in October following the initial disclosure of the breach, which revealed that unauthorized access had enabled hackers to view files uploaded by certain clients.
Key Takeaways:
- The Okta customer support system breach is more extensive than initially reported, with all users' data compromised.
- Affected customers are advised to enable strong MFA on all accounts to mitigate the risk of attacks.
- Okta is collaborating with authorities to investigate the breach and bring the perpetrators to justice.