Okta has confirmed that it’s responding to another major security incident after a hacker accessed its source code following a breach of its <a href="https://techcrunch.com/tag/github/">GitHub</a> repositories.
The identity and authentication giant said in a <a href="https://sec.okta.com/articles/2022/12/okta-code-repositories" target="_blank" rel="noopener">statement</a> on Wednesday that it was informed by GitHub about “suspicious access” to its code repositories earlier this month. Okta has since concluded that hackers used this malicious access to copy code repositories associated with Workforce Identity Cloud (WIC), the organization’s enterprise-facing security solution.
<figure id="attachment_223" aria-describedby="caption-attachment-223" style="width: 1733px" class="wp-caption alignnone"><img width="580" height="435" data-public-id="pexels-photo-207580.jpeg" data-attachment-id="223" data-permalink="https://datacollected.wpcomstaging.com/permanent-eyebrows-tattoo-tricks-revealed-by-makeup-guru-katie-adams/pexels-photo-207580/" data-orig-file="https://i0.wp.com/datacollected.wpcomstaging.com/wp-content/uploads/2022/12/pexels-photo-207580.jpeg?fit=1733%2C1300&amp;ssl=1" data-orig-size="1733,1300" data-comments-opened="1" data-image-meta="{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;Photo by Pixabay on &lt;a href=&quot;https://www.pexels.com/photo/blur-bright-business-codes-207580/&quot; rel=&quot;nofollow&quot;&gt;Pexels.com&lt;/a&gt;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;blur bright business codes&quot;,&quot;orientation&quot;:&quot;0&quot;}" data-image-title="pexels-photo-207580" data-image-description="" data-image-caption="&lt;p&gt;Photo by Pixabay on &lt;a href=&quot;https://www.pexels.com/photo/blur-bright-business-codes-207580/&quot; rel=&quot;nofollow&quot;&gt;Pexels.com&lt;/a&gt;&lt;/p&gt;
" data-medium-file="https://i0.wp.com/datacollected.wpcomstaging.com/wp-content/uploads/2022/12/pexels-photo-207580.jpeg?fit=300%2C225&amp;ssl=1" data-large-file="https://i0.wp.com/datacollected.wpcomstaging.com/wp-content/uploads/2022/12/pexels-photo-207580.jpeg?fit=580%2C435&amp;ssl=1" decoding="async" loading="lazy" class="alignnone size-full wp-post-207 wp-image-223" src="data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSI1ODAiIGhlaWdodD0iNDM1Ij48cmVjdCB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIxMDAlIj48YW5pbWF0ZSBhdHRyaWJ1dGVOYW1lPSJmaWxsIiB2YWx1ZXM9InJnYmEoMTUzLDE1MywxNTMsMC41KTtyZ2JhKDE1MywxNTMsMTUzLDAuMSk7cmdiYSgxNTMsMTUzLDE1MywwLjUpIiBkdXI9IjJzIiByZXBlYXRDb3VudD0iaW5kZWZpbml0ZSIgLz48L3JlY3Q+PC9zdmc+" alt="blur bright business codes" data-recalc-dims="1" data-format="jpeg" data-transformations="f_auto,q_auto" data-version="1682866050" data-responsive="1" data-size="1733 1300" data-delivery="upload" onload=";window.CLDBind?CLDBind(this):document.body.appendChild(document.createElement(&#039;script&#039;)).src=&#039;https://datacollected.wpcomstaging.com/?cloudinary_lazy_load_loader=1&#039;;this.onload=null;" data-cloudinary="lazy" /><figcaption id="caption-attachment-223" class="wp-caption-text">Photo by Pixabay on <a href="https://www.pexels.com/photo/blur-bright-business-codes-207580/" rel="nofollow">Pexels.com</a></figcaption></figure>
“As soon as Okta learned of the possible suspicious access, we promptly placed temporary restrictions on access to Okta GitHub repositories and suspended all GitHub integrations with third-party applications,” Okta said in a statement.
When asked by TechCrunch, Okta declined to say how attackers managed to gain access to its private repositories.
Okta says there was no unauthorized access to the Okta service or customer data, and products related to Auth0 — <a href="https://techcrunch.com/2021/03/04/making-sense-of-the-6-5b-okta-auth0-deal/">which it acquired in 2021</a> — are not impacted. “Okta does not rely on the confidentiality of its source code for the security of its services. The Okta service remains fully operational and secure,” Okta said.
The company said that since it was alerted to the breach, it has reviewed recent access to Okta software repositories, reviewed all recent commits to Okta software repositories and rotated GitHub credentials. Okta said it has also notified law enforcement.
Okta did not explicitly say if it has the technical means, such as logs, to detect what, if any, of its own systems were accessed or what other data may have been exfiltrated.
<img width="580" height="356" data-public-id="businessman-using-smartphone-access-biometric-data-by-input-password-fingerprint-scanner-access-security-system-futuristic-technology-concept_24207a25.jpg" data-attachment-id="242" data-permalink="https://datacollected.wpcomstaging.com/businessman-using-smartphone-to-access-biometric-data-by-input-p/" data-orig-file="https://i0.wp.com/datacollected.wpcomstaging.com/wp-content/uploads/2023/04/businessman-using-smartphone-access-biometric-data-by-input-password-fingerprint-scanner-access-security-system-futuristic-technology-concept.jpg?fit=6516%2C4000&amp;ssl=1" data-orig-size="6516,4000" data-comments-opened="1" data-image-meta="{&quot;aperture&quot;:&quot;2.8&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;ILCE-7M3&quot;,&quot;caption&quot;:&quot;Businessman using smartphone to access biometric data by input password or fingerprint scanner for access security system , Futuristic technology concept.&quot;,&quot;created_timestamp&quot;:&quot;1628841666&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;90&quot;,&quot;iso&quot;:&quot;100&quot;,&quot;shutter_speed&quot;:&quot;0.004&quot;,&quot;title&quot;:&quot;Businessman using smartphone to access biometric data by input p&quot;,&quot;orientation&quot;:&quot;1&quot;}" data-image-title="Businessman using smartphone to access biometric data by input p" data-image-description="" data-image-caption="&lt;p&gt;Businessman using smartphone to access biometric data by input password or fingerprint scanner for access security system , Futuristic technology concept.&lt;/p&gt;
" data-medium-file="https://i0.wp.com/datacollected.wpcomstaging.com/wp-content/uploads/2023/04/businessman-using-smartphone-access-biometric-data-by-input-password-fingerprint-scanner-access-security-system-futuristic-technology-concept.jpg?fit=300%2C184&amp;ssl=1" data-large-file="https://i0.wp.com/datacollected.wpcomstaging.com/wp-content/uploads/2023/04/businessman-using-smartphone-access-biometric-data-by-input-password-fingerprint-scanner-access-security-system-futuristic-technology-concept.jpg?fit=580%2C356&amp;ssl=1" decoding="async" loading="lazy" class="alignnone size-full wp-post-207 wp-image-242" src="data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSI1ODAiIGhlaWdodD0iMzU2Ij48cmVjdCB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIxMDAlIj48YW5pbWF0ZSBhdHRyaWJ1dGVOYW1lPSJmaWxsIiB2YWx1ZXM9InJnYmEoMTUzLDE1MywxNTMsMC41KTtyZ2JhKDE1MywxNTMsMTUzLDAuMSk7cmdiYSgxNTMsMTUzLDE1MywwLjUpIiBkdXI9IjJzIiByZXBlYXRDb3VudD0iaW5kZWZpbml0ZSIgLz48L3JlY3Q+PC9zdmc+" alt="Online privacy and security" data-recalc-dims="1" data-format="jpg" data-transformations="f_auto,q_auto" data-version="1682866507" data-responsive="1" data-size="6516 4000" data-delivery="upload" onload=";window.CLDBind?CLDBind(this):null;" data-cloudinary="lazy" />
The company’s latest incident was first reported by <a href="https://www.bleepingcomputer.com/news/security/oktas-source-code-stolen-after-github-repositories-hacked/" target="_blank" rel="noopener">Bleeping Computer</a> earlier this week, prior to Okta’s announcement.
Earlier this year, Okta was <a href="https://techcrunch.com/2022/03/23/okta-breach-sykes-sitel/">targeted by the now-notorious Lapsus$ extortion group</a>, which gained access to the account of a customer support engineer at Sykes, one of Okta’s third-party service providers, and posted screenshots of Okta’s apps and systems. Okta experienced a second compromise in August this year after it was targeted by <a href="https://techcrunch.com/2022/08/26/twilio-breach-authy/">another hacking campaign</a> that breached more than 100 organizations, including Twilio and <a href="https://techcrunch.com/2022/08/25/doordash-customer-data-breach-twilio/">DoorDash</a>.
<div class="embed breakout embed-oembed embed--techcrunch">
<blockquote class="wp-embedded-content" style="display: none;" data-secret="NdZvb9HIN9"><a href="https://techcrunch.com/2022/11/10/okta-ceo-opens-up-about-auth0-acquisition-saas-slump-and-lapsus-attack/">Okta CEO opens up about Auth0 acquisition, SaaS slump and Lapsus$ attack</a></blockquote>
</div>

data breach

Okta confirms another breach after hackers steal source code