Okta, an authentication company used by thousands of organizations around the world, says it’s investigating news of a potential breach, Reuters reports.
The disclosure comes as hacking group Lapsus$ has posted screenshots to its Telegram channel claiming to be of Okta’s internal systems, including one that appears to show Okta’s Slack channels, and another with a Cloudflare interface.
Any hack of Okta could have major ramifications for the companies, universities, and government agencies that depend upon Okta to authenticate user access to internal systems.
Writing in its Telegram channel, Lapsus$ claims to have had “Superuser/Admin” access to Okta’s systems for two months, but said its focus was “only on Okta customers.” The Wall Street Journal notes that in a recent filing Okta said it had over 15,000 customers around the world. It lists the likes of Peloton, Sonos, T-Mobile, and the FCC as customers on its website.
In a statement sent to The Verge, Okta spokesperson Chris Hollis downplayed the incident, and said Okta has not found evidence of an ongoing attack. “In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor.” Hollis said. “We believe the screenshots shared online are connected to this January event.”
“Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January,” Hollis continued. However, writing in their Telegram channel, Lapsus$ suggested that it had access for a few months.
LAPSUS$ extortion group claims to have breached @Okta. They have released 8 photos as proof.
— vx-underground (@vxunderground) March 22, 2022
The photos we are sharing has been edited so no sensitive information or user identities are displayed.
Image 1 - 4 attached below. pic.twitter.com/nR8V56dLu2
Lapsus$ is a hacking group that’s claimed responsibility for a number of high-profile incidents affecting Nvidia, Samsung, Microsoft, and Ubisoft, in some cases stealing hundreds of gigabytes of confidential data.
Latest Stories
-
Do not rely solely on foreign investments for your operations, business told
2 mins -
Boeing strike ends as workers accept new contract
44 mins -
GAF will not relent in its quest to counter external threats – GOC Southern Command
48 mins -
Election 2024: Bawumia reiterates commitment to promote sustainable mining practices
49 mins -
Ensign Global College promotes health and community well-being at Ngmayem Festival 2024
51 mins -
Bobrisky reveals reason for leaving Nigeria
1 hour -
Tiwa Savage discloses ‘craziest thing I’ve ever done for love’
2 hours -
US states worried about election unrest take security precautions
2 hours -
Modi condemns violence after Canada temple incident
2 hours -
Barcelona hit by new flood as rescuers search Valencia basement car park
2 hours -
Labadi Beach Hotel pays over GH¢16m as dividend to SSNIT
2 hours -
Elon Musk can keep giving $1m to voters, judge rules
3 hours -
Election must not divide us, government will protect each citizen – Akufo Addo
3 hours -
Novel way to beat dengue: Deaf mosquitoes stop having sex
3 hours -
Trial begins over beheading of teacher who showed Prophet Muhammed cartoon
3 hours