In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor. (1 of 2)
Show this thread
We believe the screenshots shared online are connected to this January event. Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January. (2 of 2)
-
-
Hey Todd! I'm sorry you're having a very nerve wracking night. Can you elaborate more on how you reached this conclusion? 1/8 of the screenshots demonstrates access to an internal Okta Slack account, and another one shows PII from
@Cloudflare. Isn't this a breach for CF's PII? -
I suppose the answer isn't something that fits in a tweet, perhaps. Is there maybe a timeline on a postmortem? Early containment is great if it happened, but without enough context to call off full scale investigations from every org, this is a hair-on-fire event for IR teams.
End of conversation
New conversation -
-
-
When will there be an official communication come out to your customers?
-
And their shareholders?
End of conversation
New conversation -
-
-
You guys are using log4j as well as Palo Alto (Globalprotect) which has an RCE running with an exploit since January 2021; Tell
@RandoriSecurity thanks :-)https://twitter.com/HaboubiAnis/status/1506180610460639236?s=20&t=bR6Y0Fao67Y2XniIXvFxrg …
-
Palo was patched unless I’m missing something
- Show replies
New conversation -
-
-
Believing implies you have faith, not confidence
-
You can’t prove a negative, so if no evidence points to the positive what are you left with?
- Show replies
New conversation -
-
-
Did you notify the customers that were accessed in this way?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Did Okta notify its customers of this breach at the time it happened?
-
The perfect question.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.