Okta reveals last month's data breach more significant than first thought

You know how Okta was popped a months ago and they said it only impacted 1% of their users? Yeah, well, it was actually all customers of their "Workforce Identity Cloud (WIC) and Customer Identity Solution (CIS)" product. Unlike the previously announced 1% of impacted customers, this data doesn't include "HAR files with cookies and session tokens", but is rather a dump of names and addresses of all the customers. Doesn't sound that bad, but as the linked article mentions, "names and emails are enough for a threat actor to launch phishing or social engineering attacks that could serve them in reconnaissance stages or could help them obtain more details to prepare a more sophisticated attack". It's dangerous out there in cyberspace folks, stay frosty.


If you liked this tiny snippet of content from The Sizzle - Australia's favourite daily email containing the latest tech news & bargains - then sign up for a 30-day free trial below. No credit card required! Learn more about The Sizzle at https://thesizzle.com.au