Okta: Breach Affected All Customer Support Users
Summary: Okta revised its October 2023 breach disclosure to say attackers stole the names and email addresses of nearly all customer support system users, not just the 134 customers cited in its initial report. The intruders had access to Okta's customer support case management system for several weeks beginning in late September 2023, stealing authentication tokens that could be used to add or modify authorized users on customer accounts.
Bottom line: Okta says a large share of the exposed accounts belong to Okta administrators, and six percent of its customers - more than 1,000 - still run Okta administrator accounts without MFA, leaving those privileged users as prime targets for phishing.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026