Okta: Stolen Credential Led to Support System Breach

Identity and access management services provider Okta said that threat actors used a stolen credential in order to access its support case management system, allowing them to view files related to support cases that were uploaded by certain customers.

Okta's advisory said that HTTP Archive (HAR) files were impacted in the compromise. These files, which help with troubleshooting for issues by logging website interactions, contain sensitive data like cookies and session tokens. Okta warned that threat actors can use this …

access access management advisory archive breach case case management cases compromise credential customers files http http archive identity identity and access identity and access management led management okta order services stolen support system threat threat actors