Okta Tumbles After Hacking Group Lapsus$ Claims Data Breach

Bloomberg2022-03-22

The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

uynujeel
2022-03-23
uynujeel
Good read. Thanks for the article
Chonky
2022-03-23
Chonky
Like please

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/1197938045?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2022-03-22 21:57","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"1197938045","market":"us","top_or_hot":-1,"title":"Okta Tumbles After Hacking Group Lapsus$ Claims Data Breach","media":"Bloomberg","content":"<div>\n<p>The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate ...</p>\n\n<a href=\"https://finance.yahoo.com/news/okta-shares-fall-hacking-group-103328036.html\">Source Link</a>\n\n</div>\n","source":"lsy1584095487587","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Okta Tumbles After Hacking Group Lapsus$ Claims Data Breach</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nOkta Tumbles After Hacking Group Lapsus$ Claims Data Breach\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-03-22 21:57 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/okta-shares-fall-hacking-group-103328036.html><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate ...</p>\n\n<a href=\"https://finance.yahoo.com/news/okta-shares-fall-hacking-group-103328036.html\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"OKTA","symbol_name":"Okta Inc.","start_time":0,"source_url":"https://finance.yahoo.com/news/okta-shares-fall-hacking-group-103328036.html","article_id":"1197938045","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=1197938045","pubTimestamp":1647957442,"sourceInfo":{"source_id":"lsy1584095487587","name":"Bloomberg"},"weMediaInfo":null,"summary":"The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San","collect":0,"end_time":0,"defaultTopTitle":"yahoo.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"OKTA":"Okta Inc."},"translate_title":"Okta在黑客组织失误后暴跌美元索赔数据泄露","themeId":"","isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"OKTA":0.9},"content_text":"The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate clients.On its Telegram channel, Lapsus$ posted screenshots of its alleged access to Okta administrative and other systems.“For a service that powers authentication systems to many of the largest corporations ... I think these security measures are pretty poor,” Lapsus$ commented in the channel.Okta shares fell 4.8% as the market opened in New York on Tuesday.“In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor,” Chief Executive Officer Todd McKinnon wrote in a Twitter post. “We believe the screenshots shared online are connected to this January event. Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January.”In its posts, Lapsus$ also said it did not access or steal any databases from Okta. “Our focus was only on Okta customers,” one comment noted.Cloudflare Inc., a website security company that is a customer of Okta’s, was aware that Okta may have been compromised, CEO Matthew Prince said on Twitter.“We are resetting the Okta credentials of any employees who’ve changed their passwords in the last 4 months, out of abundance of caution. We’ve confirmed no compromise. Okta is one layer of security. Given they may have an issue, we’re evaluating alternatives for that layer,” he added.Lapsus$ also had touted leaks of employee accounts for LG Electronics Inc. and source code for Bing, the Microsoft Corp. search engine, and Cortana, Microsoft’s virtual assistant.Microsoft said it’s investigating the claims of a breach. An LG spokeswoman said in a text message that the company assumed email accounts of employees were leaked but there appears to be no damage to customer data.The Lapsus$ group has emerged only in recent months, offering to pay employees at global corporations for access to their company.The gang uses the messaging app Telegram to publish updates, market itself and distribute purportedly leaked information. While the identity of the members remains a mystery, the group has repeatedly stated that it’s motivated to make money, rather than create disruptions on behalf of any nation-state.Lapsus represents an anomaly among apparent cybercriminal gangs in that there is no evidence that the group has deployed malicious software in any of its attacks, according to the threat intelligence firm Digital Shadows Ltd.","kind":null,"is_publish_news":true,"is_publish_highlight":true,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[{"id":9034753723,"gmtCreate":1647978107373,"gmtModify":1676534286981,"author":{"id":"3578389631418611","authorId":"3578389631418611","name":"uynujeel","avatar":"https://static.tigerbbs.com/553141082503cface6fae96aaf4234df","vip":1,"crmLevel":4,"crmLevelSwitch":0,"idStr":"3578389631418611","authorIdStr":"3578389631418611"},"htmlText":"Good read. Thanks for the article","listText":"Good read. Thanks for the article","text":"Good read. Thanks for the article","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":1,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9034753723","repostId":1197938045,"repostType":4,"repost":{"id":"1197938045","pubTimestamp":1647957442,"share":"https://ttm.financial/m/news/1197938045?lang=&edition=fundamental","pubTime":"2022-03-22 21:57","market":"us","language":"en","title":"Okta Tumbles After Hacking Group Lapsus$ Claims Data Breach","url":"https://stock-news.laohu8.com/highlight/detail?id=1197938045","media":"Bloomberg","summary":"The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San","content":"<html><head></head><body><p>The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate clients.</p><p>On its Telegram channel, Lapsus$ posted screenshots of its alleged access to Okta administrative and other systems.</p><p>“For a service that powers authentication systems to many of the largest corporations ... I think these security measures are pretty poor,” Lapsus$ commented in the channel.</p><p>Okta shares fell 4.8% as the market opened in New York on Tuesday.</p><p>“In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor,” Chief Executive Officer Todd McKinnon wrote in a Twitter post. “We believe the screenshots shared online are connected to this January event. Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January.”</p><p>In its posts, Lapsus$ also said it did not access or steal any databases from Okta. “Our focus was only on Okta customers,” one comment noted.</p><p>Cloudflare Inc., a website security company that is a customer of Okta’s, was aware that Okta may have been compromised, CEO Matthew Prince said on Twitter.</p><p>“We are resetting the Okta credentials of any employees who’ve changed their passwords in the last 4 months, out of abundance of caution. We’ve confirmed no compromise. Okta is one layer of security. Given they may have an issue, we’re evaluating alternatives for that layer,” he added.</p><p>Lapsus$ also had touted leaks of employee accounts for LG Electronics Inc. and source code for Bing, the Microsoft Corp. search engine, and Cortana, Microsoft’s virtual assistant.</p><p>Microsoft said it’s investigating the claims of a breach. An LG spokeswoman said in a text message that the company assumed email accounts of employees were leaked but there appears to be no damage to customer data.</p><p>The Lapsus$ group has emerged only in recent months, offering to pay employees at global corporations for access to their company.</p><p>The gang uses the messaging app Telegram to publish updates, market itself and distribute purportedly leaked information. While the identity of the members remains a mystery, the group has repeatedly stated that it’s motivated to make money, rather than create disruptions on behalf of any nation-state.</p><p>Lapsus represents an anomaly among apparent cybercriminal gangs in that there is no evidence that the group has deployed malicious software in any of its attacks, according to the threat intelligence firm Digital Shadows Ltd.</p></body></html>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Okta Tumbles After Hacking Group Lapsus$ Claims Data Breach</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nOkta Tumbles After Hacking Group Lapsus$ Claims Data Breach\n</h2>\n\n<h4 class=\"meta\">\n\n\n2022-03-22 21:57 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/okta-shares-fall-hacking-group-103328036.html><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate ...</p>\n\n<a href=\"https://finance.yahoo.com/news/okta-shares-fall-hacking-group-103328036.html\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"OKTA":"Okta Inc."},"source_url":"https://finance.yahoo.com/news/okta-shares-fall-hacking-group-103328036.html","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1197938045","content_text":"The hacking group Lapsus$ claims it gained internal access to the system privileges of Okta, the San Francisco-based company that manages user authentication services for thousands of corporate clients.On its Telegram channel, Lapsus$ posted screenshots of its alleged access to Okta administrative and other systems.“For a service that powers authentication systems to many of the largest corporations ... I think these security measures are pretty poor,” Lapsus$ commented in the channel.Okta shares fell 4.8% as the market opened in New York on Tuesday.“In late January 2022, Okta detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors. The matter was investigated and contained by the subprocessor,” Chief Executive Officer Todd McKinnon wrote in a Twitter post. “We believe the screenshots shared online are connected to this January event. Based on our investigation to date, there is no evidence of ongoing malicious activity beyond the activity detected in January.”In its posts, Lapsus$ also said it did not access or steal any databases from Okta. “Our focus was only on Okta customers,” one comment noted.Cloudflare Inc., a website security company that is a customer of Okta’s, was aware that Okta may have been compromised, CEO Matthew Prince said on Twitter.“We are resetting the Okta credentials of any employees who’ve changed their passwords in the last 4 months, out of abundance of caution. We’ve confirmed no compromise. Okta is one layer of security. Given they may have an issue, we’re evaluating alternatives for that layer,” he added.Lapsus$ also had touted leaks of employee accounts for LG Electronics Inc. and source code for Bing, the Microsoft Corp. search engine, and Cortana, Microsoft’s virtual assistant.Microsoft said it’s investigating the claims of a breach. An LG spokeswoman said in a text message that the company assumed email accounts of employees were leaked but there appears to be no damage to customer data.The Lapsus$ group has emerged only in recent months, offering to pay employees at global corporations for access to their company.The gang uses the messaging app Telegram to publish updates, market itself and distribute purportedly leaked information. While the identity of the members remains a mystery, the group has repeatedly stated that it’s motivated to make money, rather than create disruptions on behalf of any nation-state.Lapsus represents an anomaly among apparent cybercriminal gangs in that there is no evidence that the group has deployed malicious software in any of its attacks, according to the threat intelligence firm Digital Shadows Ltd.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":9034724354,"gmtCreate":1647972523262,"gmtModify":1676534286890,"author":{"id":"3581920930646755","authorId":"3581920930646755","name":"Chonky","avatar":"https://static.tigerbbs.com/2b26c78fb11a9e646bce483ea1b0d6f3","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3581920930646755","authorIdStr":"3581920930646755"},"htmlText":"Like please&nbsp;","listText":"Like please&nbsp;","text":"Like please","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/9034724354","repostId":1197938045,"repostType":4,"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"}],"isCommentEnd":false,"newsSizeData":{"likeSize":86,"commentSize":2,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"deviceId":"web-server-community-laohu8-v3","version":"4.29.1","shortVersion":"4.29.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/1197938045"}