Breachesby GlyphOkta
Disclosed Oct 20, 20234,961 affectedConfirmed
Stolen credential gives attacker access to Okta customer support system
Okta said an attacker used a stolen credential to access its support case management system and view HAR files uploaded by some customers, which could contain session tokens. In November 2023 it said the attacker had also downloaded a report with the names and email addresses of all its customer support system users.
What is known
| People affected | 4,961 (as reported by the organization) |
|---|---|
| Disclosed | Oct 20, 2023 |
| Happened | Sep 23, 2023 |
| Attack | Hacking |
| Data exposed | NamesEmailsCredentials and tokens |
| Sector | Tech · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: OktaTracking Unauthorized Access to Okta's Support SystemOkta admits hackers accessed data on all customers during recent breachOkta October Customer Support Security Incident: Update and Recommended Actions (8-K exhibit, Nov 29, 2023)Indiana Attorney General 2023 data breach report: Okta
Notices filed
Other breaches at Okta
History of this record
empty to organizationby backfillSource
empty to 4961by backfillSource
unknown to hackingby seedSource
[] to ["names","emails","credentials"]by seedSource
2023-11-01 to 2023-10-20by seedSource
empty to Okta said an attacker used a stolen credential to access its support case management system and view HAR files uploaded by some customers, which could contain session tokens. In November 2023 it said the attacker had also downloaded a reporby seedSource
empty to Stolen credential gives attacker access to Okta customer support systemby seedSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.