Cybersecurity incident
Date: 2022-01-31 00:00:00
Affected organization: Okta
Affected country: United States of America
Industry: Professional, Scientific, and Technical Services
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: Lapsus$
Actor type: Criminal
Actor country: Undetermined
Description: Okta says it is investigating claims of data breach after the Lapsus$ extortion group posts screenshots in their Telegram channel of what it alleges to be access to Okta's backend administrative consoles and customer data. Few hours later the company confirms the breach: 2.5% of their customers are affected.