“Unfortunately, we failed to rotate one service token and three service accounts (out of thousands) of credentials that were leaked during the Okta compromise.”
Cloudflare got burned by Okta in October and left four leaked credentials live because someone believed they were unused. A nation state attacker walked in with them, read 36 Jira tickets on vulnerability management and MFA bypass, and pulled 76 source code repositories. The cleanup meant rotating more than 5,000 credentials and reimaging every machine in the global network. Four forgotten keys cost more than the breach that leaked them.