Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

1Password

Security incidents tagged 1Password. Newest first.

0 1Password incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
1120
Longest quiet run: 1058 days (Nov 30–Oct 22)
Show 1 older incident

September 2023 1

  • HighNo fix needed

    Okta support system breach: HAR files with session tokens stolen

    An attacker used a stolen service account to get into Okta's customer support system and download files from 134 customers. Some were HAR files with live session tokens, which were used to hijack the Okta sessions of 5 customers, including BeyondTrust, Cloudflare and 1Password. Okta later found the attacker also downloaded the names and emails of all support system users.

    Okta Help Center (customer support system)Closed Nov 29, 2023