On Wednesday, BleepingComputer reported Okta had been sending a “confidential” security incident notification to partners, and now the company has confirmed someone stole data from GitHub repositories for the Okta Workforce Identity Cloud (WIC) product in early December.
In a statement on its website, Okta said it had alerted law enforcement, and:
Our investigation concluded that there was no unauthorized access to the Okta service, and no unauthorized access to customer data. Okta does not rely on the confidentiality of its source code for the security of its services. The Okta service remains fully operational and secure.
[BleepingComputer]









