Okta's source code stolen after GitHub repositories hacked

TL;DR

An excerpt from the remainder of the notification, reviewed by BleepingComputer, is published below:As soon as Okta learned of the possible suspicious access, we promptly placed temporary restrictions on access to Okta GitHub repositories and suspended all GitHub integrations with third-party applications.We have since reviewed all recent access to Okta software repositories hosted by GitHub to understand the scope of the exposure, reviewed all recent commits to Okta software repositories hosted with GitHub to validate the integrity of our code, and rotated GitHub credentials.BleepingComputer reached out to Okta with questions in advance of publishing but a reply was not immediately available.After stating that it was investigating these claims, Okta shortly acknowledged that the hack being referred to had in fact occurred late January 2022 and potentially affected 2.5% of its customers.In April, Okta clarified that the January breach had lasted "25 consecutive minutes" and the impact was significantly smaller than what was originally anticipated: limited to just two customers."

Like summarized versions? Support us on Patreon!