Okta’s Investigation of the January 2022 Compromise
I don't understand how the CSO can write this:<p>"In this post, I want to provide a timeline and my perspective on what has transpired, and where we are today with this investigation. I hope that it will illuminate why <i>I am confident in our conclusions that the Okta service has not been breached</i> and there are no corrective actions that need to be taken by our customers."<p>And then go on to write paragraphs of detail and a timeline that explicitly shows for a five day period an unauthorized user had full super user access to the service.<p>He explicitly says, "The report from the forensic firm highlighted that <i>there was a five-day window of time between January 16-21, 2022 when the threat actor had access to the Sitel environment, which we validated with our own analysis.</i>"<p>This is some unbelievable double speak to try to claim that Okta was not breached.  Any trust I had in this company is completely in the toilet, just based on this response.  How is the CEO not responding to this too?  The hole just keeps getting dug deeper the more they say.