Okta, the American identity and access management company, has announced that not some, but all customer data was stolen during the data breach in September. “We determined that the threat actor ran and downloaded a report that contained the names and email addresses of all users of the Okta customer support system,” said the company update.

 

The announcement follows further analyzes that have been carried out regarding the security incident Okta reported in October 2023. That incident involved the customer support management system. The company now reports that the breach took place on September 28, 2023 at 15:06 PM and that mainly contact information was stolen from users (including full name, username, email address, business address and telephone numbers. According to the company, 99,6% of users that user information is limited to full name and email address.

Increased risk of phishing

Based on this further analysis, the company provides several advice to end users to tighten their security, including enabling multi-factor authentication (MFA). “Okta customers log into the Okta customer support system with the same accounts they use in their own Okta environment. Many users of the customer service system are Okta administrators,” the company said in the update.

The company warns of an increased risk of phishing and social engineering attacks targeting these users. (Okta)

Technology