Okta, an authentication company used by thousands of organizations around the world, says it’s investigating news of a potential breach, Reuters reports.
The disclosure comes as hacking group Lapsus$ has posted screenshots to its Telegram channel claiming to be of Okta’s internal systems, including one that appears to show Okta’s Slack channels, and another with a Cloudflare interface.
Any hack of Okta could have major ramifications for the companies, universities, and government agencies that depend upon Okta to authenticate user access to internal systems.
Writing in its Telegram channel, Lapsus$ claims to have had “Superuser/Admin” access to Okta’s systems for two months, but said its focus was “only on Okta customers.” The Wall Street Journal notes that in a recent filing Okta said it had over 15,000 customers around the world. It lists the likes of Peloton, Sonos, T-Mobile, and the FCC as customers on its website.
In a statement sent to The Verge, Okta spokesperson Chris Hollis downplayed the incident, and said Okta has not found evidence of an ongoing attack. “In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor.” Hollis said. “We believe the screenshots shared online are connected to this January event.”
“Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January,” Hollis continued. However, writing in their Telegram channel, Lapsus$ suggested that it had access for a few months.
LAPSUS$ extortion group claims to have breached @Okta. They have released 8 photos as proof.
— vx-underground (@vxunderground) March 22, 2022
The photos we are sharing has been edited so no sensitive information or user identities are displayed.
Image 1 - 4 attached below. pic.twitter.com/nR8V56dLu2
Lapsus$ is a hacking group that’s claimed responsibility for a number of high-profile incidents affecting Nvidia, Samsung, Microsoft, and Ubisoft, in some cases stealing hundreds of gigabytes of confidential data.
Latest Stories
-
Gold Fields Ghana Foundation challenges graduates to maximize benefits of community apprenticeship programme
16 mins -
GBC accuses Deputy Information Minister Sylvester Tetteh of demolishing its bungalow illegally
27 mins -
Boost for education as government commissions 80 projects
38 mins -
NAPO commissions library to honour Atta-Mills’ memory
49 mins -
OmniBSIC Bank champions health and wellness with thriving community walk
51 mins -
Kora Wearables unveils Neo: The Ultimate Smartwatch for Ghana’s tech-savvy and health-conscious users
55 mins -
NDC supports Dampare’s ‘no guns at polling stations’ directive
58 mins -
Police officer interdicted after video of assault goes viral
1 hour -
KNUST’s Prof. Reginald Annan named first African recipient of World Cancer Research Fund
1 hour -
George Twum-Barimah-Adu pledges inclusive cabinet with Minority and Majority leaders
2 hours -
Labourer jailed 5 years for inflicting cutlass wounds on businessman
2 hours -
Parliament urged to fast-track passage of Road Traffic Amendment Bill
2 hours -
Mr Daniel Kofi Asante aka Electrician
2 hours -
Minerals Commission, Solidaridad unveils forum to tackle child labour in mining sector
2 hours -
Election 2024: Engagement with security services productive – NDC
2 hours