We review vendors based on rigorous testing and research but also take into account your feedback and our affiliate commission with providers. Some providers are owned by our parent company.
Learn more
vpnMentor was established in 2014 as an independent site reviewing VPN services and covering privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize the independent, professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.
Advertising Disclosure

vpnMentor was established in 2014 as an independent site reviewing VPN services and covering privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize the independent, professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.

Okta Breach Exposes All Customer Support Users

Okta Breach Exposes All Customer Support Users
Zane Kennedy Published on 1st December 2023 Cybersecurity Researcher

In a startling revelation, Okta, a leading identity and access management company, has confirmed that its October security breach has impacted all users of its customer support management system. This breach, originally disclosed in October 2023, has shown more extensive damage than initially thought, affecting nearly every Okta customer.

The breach, first identified as a limited data exposure impacting less than 1% of customers, has now been understood to involve unauthorized access to a comprehensive report containing a huge amount of user data. According to Okta's Chief Security Officer David Bradbury, the threat actor ran and downloaded a report on September 28, 2023, that included names, email addresses, and other user details from Okta’s customer support system.

This incident, marking a significant escalation from the initial analysis, puts a wide range of customers at risk. All Okta Workforce Identity Cloud (WIC) and Customer Identity Solution (CIS) users, except those in highly secure FedRamp High and DoD IL4 environments, are affected. Okta also assured that its Auth0/CIC support case management system remained untouched by this breach.

Thankfully, for 99.6% of the users, the report only included names and email addresses, with Okta confirming the absence of exposed user credentials or sensitive personal data.

Still, this breach poses a heightened risk of phishing and social engineering attacks for users, especially given that many are Okta administrators. Okta emphasizes the importance of multi-factor authentication (MFA) in safeguarding against unauthorized access, noting that 94% of its customers already employ MFA for their administrators.

In response to the incident, Okta has introduced several security enhancements. These include admin session binding and timeouts, aligning with NIST AAL3 guidelines. Such measures are crucial, as Okta has been a frequent target for cyberattacks, including an incident in December 2022 where hackers accessed its GitHub repositories and another in January 2023, impacting about 2.5% of its customer base.

Okta's ongoing collaboration with a third-party digital forensics firm aims to validate these findings, intending to share the report with customers upon completion.

This breach is a stark reminder of the evolving cybersecurity landscape, underlining the need for robust security measures to protect sensitive user data. Okta’s proactive approach in responding to this incident and enhancing its security protocols exemplifies the critical need for continuous vigilance and adaptation in the face of ever-changing cyber threats.

About the Author

Zane is a Cybersecurity Researcher and Writer at vpnMentor. His extensive experience in the tech and cybersecurity industries provides readers with accurate and trustworthy news stories and articles. He aims to help individuals protect themselves through informative content and awareness of cybersecurity's crucial role in today's digital landscape.