Okta reports another data breach, this time exposing employees
Learn More
Just two weeks after Okta reported a previous breach, they are in another report.
This time they have issued an alert to about 5,000 of its current and former employees regarding the exposure of their personal details. This exposure occurred due to a security breach at a third-party service provider, Rightway Healthcare, which administers healthcare benefits for Okta's personnel and their families.
Rightway Healthcare experienced a network intrusion on September 23, 2023, which allowed cybercriminals to access a file that was used for insurance and benefits services.
The compromised file held sensitive data pertaining to Okta's employees and their dependents, including their
- full names,
- Social Security Numbers,
- details of their medical insurance plans.
The leaked data spanned from April 2019 to 2020 and was a result of a security incident at Rightway Health. Okta assured that the incident was isolated to the vendor and did not affect the security of Okta services or any customer data.
Okta was notified of the breach by Rightway on October 12, 2023, prompting Okta to promptly initiate an inquiry to assess the breach's impact. The incident, reported to the Office of the Maine Attorney General, was found to affect a total of 4,961 individuals associated with Okta.
Okta emphasized that there is no evidence of misuse of the exposed personal information. Nevertheless, the company is providing guidance on how to sign up for a two-year subscription to credit monitoring, identity theft protection, and fraud defense services offered by Experian.
