Okta
Disclosed Mar 22, 20224 years agoConfirmed
Lapsus$ accesses Okta support engineer's machine at vendor Sitel
After Lapsus$ posted screenshots, Okta said an attacker had accessed a Sitel support engineer's laptop in January 2022 and initially estimated up to 366 customers could be affected. Its final investigation found the attacker controlled the workstation for 25 minutes and accessed two customer tenants.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 22, 2022 |
| Discovered | Jan 2022 |
| Attack | Vendor breach |
| Data exposed | Internal documents, Other |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Okta says hundreds of companies impacted by security breachtechcrunch.com · News | News |
| Updated Okta Statement on LAPSUS$okta.com · The organization | The organization |
| Okta Concludes its Investigation Into the January 2022 Compromiseokta.com · The organization | The organization |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Mar 22, 2022 |
Other breaches at Okta
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Stolen credential gives attacker access to Okta customer support systemOct 20, 20232 years agoHacking | Oct 20, 20232 years ago | Hacking | Tech | Confirmed | 4,961 |
| Attackers copy Okta Workforce Identity Cloud source code from GitHubDec 21, 20223 years agoHackingUnverified | Dec 21, 20223 years ago | Hacking | Tech | Unverified | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.