Okta
Security incidents tagged Okta. Newest first.
0 Okta incidents in the last 12 months
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 1074
- Longest quiet run: 995 days (Feb 2–Oct 23)
Show 2 older incidents2 older incidents
November 2023 1
HighCloudflare 'Thanksgiving 2023' intrusion with tokens left over from the Okta breachNo fix needed
Cloudflare internal Atlassian environment No fix needed
A suspected nation-state attacker used one access token and three service account credentials stolen in the October Okta breach, which Cloudflare had failed to rotate, to get into Cloudflare's Atlassian Confluence, Jira and Bitbucket. Cloudflare said customer data and systems were not affected.
September 2023 1
- HighNo fix needed
Okta support system breach: HAR files with session tokens stolen
An attacker used a stolen service account to get into Okta's customer support system and download files from 134 customers. Some were HAR files with live session tokens, which were used to hijack the Okta sessions of 5 customers, including BeyondTrust, Cloudflare and 1Password. Okta later found the attacker also downloaded the names and emails of all support system users.
Okta Help Center (customer support system)Closed Nov 29, 2023
