According to the complaint in Delaware federal court, the hacking group known as Lapsus$ was able to cause the breach because Okta had not imposed adequate safeguards.
The lawsuit further claims that Okta withheld information about its merger with a competitor. Okta didn’t immediately respond to Law360’s request for comment.