“Earlier this month, GitHub alerted Okta of suspicious access to Okta’s code repositories, states the notification.”
The identity company found out it was breached because GitHub told it. Okta says the source code doesn’t matter for security, and it sent the news in a “confidential” email to customers. This is the same company that sat on the Lapsus$ breach for two months. Trust is the product, and it keeps leaking.