Okta’s website says that the company has more than 15,000 customers, and its chief security officer, David Bradbury, said in a statement that “a small percentage of customers—approximately 2.5%—have potentially been impacted and [their] data may have been viewed or acted upon.”
The concession came about 24 hours after Okta first acknowledged the cybersecurity incident, apparently prompted by the Lapsus$ hacking group posting screenshots that claimed access to internal Okta systems.