Okta Hack Update Shows Challenges in Rapid Cyber Disclosures

Okta’s admission that an October hack of its customer support system resulted in a far larger data breach than previously thought shows how challenging prompt cybersecurity disclosures can be, just weeks before new regulations that require many companies to do just that go into effect. 

Identity-management company Okta said Wednesday in a filing with the U.S. Securities and Exchange Commission that a breach of its customer support system had resulted in the theft of names and email addresses of all its commercial users. Okta said the breach didn’t include users of its federal systems, which are stored on a separate server, or its support system for its Auth0 authentication software, which it acquired in 2022.