Okta
Disclosed Mar 22, 2022Confirmed
Lapsus$ accesses Okta support engineer's machine at vendor Sitel
After Lapsus$ posted screenshots, Okta said an attacker had accessed a Sitel support engineer's laptop in January 2022 and initially estimated up to 366 customers could be affected. Its final investigation found the attacker controlled the workstation for 25 minutes and accessed two customer tenants.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 22, 2022 |
| Discovered | Jan 2022 |
| Attack | Vendor breach |
| Data exposed | Internal documentsOther |
| Sector | Tech · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Okta
Stolen credential gives attacker access to Okta customer support systemHacking exposed names, emails and credentials and tokens. Reported to the California AG.Hacking4,961 affectedTechUSOct 20, 2023Attackers copy Okta Workforce Identity Cloud source code from GitHubHacking exposed source code.HackingTechUSUnverifiedDec 21, 2022
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.