Okta Data Breach Investigation
Lowey Dannenberg is investigating claims for violations of the common law and state consumer protection statutes by Okta, Inc. (“Okta”) as a result of a data breach.
What Happened and What Information Was Involved:
Okta is a popular identity and access management (IAM) provider for the cloud. Okta recently disclosed that its customer support case management system was compromised, exposing sensitive customer data including cookies and session tokens, leading cybercriminals to potentially use the information to impersonate valid users contacting support. Okta was recently identified as the initial attack vector in recent twin cyberattacks on MGM Resorts and Caesars Entertainment which resulted in the disclosure of driver’s license numbers, and/or Social Security numbers.