Okta Breach Tied to Worker’s Personal Google Account [Video]

Account Takeover Fraud , Breach Notification , Cybercrime

Threat Actor Used Session Hijacking Technique to Access Files of 134 Okta Customers (@prajeetspeaks) • November 4, 2023    

Days after announcing a security compromise, cloud-based identity and authentication management provider Okta said that an unknown threat actor had accessed files of 134 customers after an employee signed in to a personal Google profile on the Chrome browser of an Okta-managed laptop.

See Also: Live Webinar | Generative AI: Myths, Realities and Practical Use Cases

The laptop included access to an “unsecured” employee service account stored in Okta’s customer support system, which grants permission to view and update customer support cases, according to a post on Friday.

“The username and password of the service account had been saved into the employee’s personal Google account. The most likely avenue for exposure of this credential is the compromise of the employee’s personal Google account or personal device,” said Okta …