Okta, an authentication company used by thousands of organizations around the world, says it’s investigating news of a potential breach, Reuters reports.
The disclosure comes as hacking group Lapsus$ has posted screenshots to its Telegram channel claiming to be of Okta’s internal systems, including one that appears to show Okta’s Slack channels, and another with a Cloudflare interface.
Any hack of Okta could have major ramifications for the companies, universities, and government agencies that depend upon Okta to authenticate user access to internal systems.
Writing in its Telegram channel, Lapsus$ claims to have had “Superuser/Admin” access to Okta’s systems for two months, but said its focus was “only on Okta customers.” The Wall Street Journal notes that in a recent filing Okta said it had over 15,000 customers around the world. It lists the likes of Peloton, Sonos, T-Mobile, and the FCC as customers on its website.
In a statement sent to The Verge, Okta spokesperson Chris Hollis downplayed the incident, and said Okta has not found evidence of an ongoing attack. “In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor.” Hollis said. “We believe the screenshots shared online are connected to this January event.”
“Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January,” Hollis continued. However, writing in their Telegram channel, Lapsus$ suggested that it had access for a few months.
LAPSUS$ extortion group claims to have breached @Okta. They have released 8 photos as proof.
— vx-underground (@vxunderground) March 22, 2022
The photos we are sharing has been edited so no sensitive information or user identities are displayed.
Image 1 - 4 attached below. pic.twitter.com/nR8V56dLu2
Lapsus$ is a hacking group that’s claimed responsibility for a number of high-profile incidents affecting Nvidia, Samsung, Microsoft, and Ubisoft, in some cases stealing hundreds of gigabytes of confidential data.
Latest Stories
-
Today’s front pages: Tuesday, November 5, 2024
4 mins -
Galamsey: Investigation into attack on Joy News’ Erastus Asare and colleagues already growing cold
35 mins -
Mahama promises construction of stadia in all 16 regions if elected
52 mins -
Dampare has transformed Police training school – Bawumia
55 mins -
America braced as two stark visions collide on election day
57 mins -
NAPO urges Ghanaians to support NPP’s vision for national development
1 hour -
About 95% of PWDs in Obuasi have source of livelihood – MCE
1 hour -
Immigration Service intercepts 54 gallons of fuel
1 hour -
Election 2024: Roman Fada selected as flagbearer for Ghana Freedom Party
2 hours -
Bawumia to launch Ghana’s credit scoring system on Nov. 7
2 hours -
Alan to combat galamsey with strategic youth-centred business model
2 hours -
Agona Swedru chiefs commit to ending child marriage within their jurisdiction
2 hours -
Sunyani Traditional Council endorses Bawumia – NAPO government
2 hours -
Adutwum defends double track in Free SHS, citing research and positive outcomes
2 hours -
‘Prevent and condemn illegal pressure on Judiciary’ – AG to GBA
2 hours