Breachesby GlyphCloudflare
Disclosed Feb 1, 2024Confirmed
Nation-state actor uses Okta-stolen tokens to breach Cloudflare Atlassian systems
Cloudflare said a suspected nation-state attacker used a token and service account credentials stolen in the October 2023 Okta breach, which Cloudflare had not rotated, to access its internal Confluence wiki, Jira and Bitbucket source code in November 2023. No customer data or systems were affected.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Feb 1, 2024 |
| Discovered | Nov 23, 2023 |
| Attack | Hacking |
| Data exposed | Internal documentsSource codeCredentials and tokens |
| Sector | Tech · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Cloudflare
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.