“BeyondTrust said it notified Okta of the incident on October 2, but accused Okta of not acknowledging the breach for almost three weeks.”
1Password got hit on September 29, two weeks before Okta said anything. The hackers used a session token pulled from a troubleshooting file an IT staffer had uploaded to Okta’s support system that same day. Okta puts the damage at 1% of 17,000 customers, or 170 organizations. The identity company found out about its own breach from its customers.