Lapsus$ Breach Significantly Smaller Than Expected, Okta

Share post:

Okta said the Lapsus breach that happened in January, was significantly smaller than expected. This was confirmed after a series of investigations.

According to Okta’s Chief Security Officer David Bradbury, the final forensic report showed that the attacker only accessed two active customers after the attacker had gained control of a single workstation used by an engineer working for Sitel.

Bradbury explained that “the threat actor was unable to successfully perform any configuration changes, MFA or password resets or customer support ‘impersonation’ events.”

Okta has ended its relationship with Sitel. Okta now directly manages all third-party devices with access to its customer support tools.

Bradbury said the company will instruct its service providers to meet the new security requirements, including the introduction of the Zero Trust security architecture and authentication via Okta’s IDAM solution for all workplace apps.

The sources for this piece include an article in BleepingComputer.



Related articles

Reddit relocates headquarters

Reddit's headquarters is being relocated from its current 78,000-square-foot office at 1455 Market Street at San Francisco's Mid-Market...

Meta launches Meta Verified in U.S.

Meta has launched its subscription service in the United States, allowing Facebook and Instagram users to pay for...

Data center supply chain disruptions on the rise

According to a recent Uptime Institute survey, data center operators continue to face significant supply chain challenges. Despite improvements...

Google to end support for Glass Enterprise Edition AR specs

Google has announced that the Glass Enterprise Edition, its business-grade augmented reality specs, will no longer be supported. Google...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways