Okta had 4,961 current and former employees' data, including names, health insurance plan numbers, and Social Security numbers, compromised following a breach at its third-party vendor Rightway Healthcare, reports The Register.
Immediate investigation was launched by Okta after being informed regarding the incident by Rightway on Oct. 12, or about three weeks after the third-party's IT environment was first infiltrated, with Okta reassuring that there has been no evidence suggesting any misuse of compromised employee data.
"This incident does not relate to the use of Okta services and Okta services remain secure. No Okta customer data is impacted by this incident," said an Okta spokesperson.
Such an incident follows a series of cyber incidents at Okta, with the identity and access management firm reporting having recently been impacted by a breach of sensitive customer data, which also impacted password manager 1Password, as well as social engineering attacks that affected clients MGM Resorts and Caesars Entertainment.
The U.S. Commerce Department has been urged by Sen. Ron Wyden, D-Ore., to bolster the already robust proposed U.S. tech rules that would prevent the utilization of the country's surveillance tools in repressive countries amid concerns of potential gaps that could be exploited by such nations.
Such an intrusion has prompted automated delivery of the malicious lottie-player NPM package versions among users who obtained the library through third-party content delivery networks.
The collaboration offers enterprises a scalable solution that integrates automated public key infrastructure and certificate management to secure continuous integration and continuous delivery pipelines without slowing developer workflows.