Okta

Oakta, a provider of cloud identity and access management solutions, alerts approximately 5,000 employees to a data breach that occurred at Rightway Healthcare, a third-party vendor, which has exposed their personal information.

Okta was notified by Rightway Healthcare that an unauthorised actor had obtained access to an eligibility census file that the provider kept while providing services to Okta.

Rightway notified Okta that one of its unauthorised actors had obtained access to an eligibility census file that Rightway kept as part of its service delivery to Okta.

Names, Social Security numbers, and health or medical insurance plan numbers are among the exposed data. According to the notification, the business is not aware of any improper use of publicly available personal data.

Source: https://securityaffairs.com/153478/data-breach/okta-data-breach-third-party-vendor.html

TPRM report: https://scoringcyber.rankiteo.com/company/okta-inc-

"id": "okt1136121123",
"linkid": "okta-inc-",
"type": "Breach",
"date": "11/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 5000,
                        'industry': 'Cloud Identity and Access Management',
                        'name': 'Okta',
                        'type': 'Organization'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 5000,
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information',
                                              'Health Information']},
 'description': 'Okta, a provider of cloud identity and access management '
                'solutions, alerts approximately 5,000 employees to a data '
                'breach that occurred at Rightway Healthcare, a third-party '
                'vendor, which has exposed their personal information.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Health or medical insurance plan numbers']},
 'response': {'communication_strategy': 'Notification to Employees'},
 'threat_actor': 'Unauthorized Actor',
 'title': 'Data Breach at Okta via Rightway Healthcare',
 'type': 'Data Breach'}