Bleeping Computer reports that Okta is firmly denying that data supposedly being leaked on a hacking forum from its system is from a hack of its system in October 2023.
On Saturday, a cybercriminal using the alias ‘Ddarknotevil’ claimed to be releasing an Okta Database containing information of 3,800 customers that was stolen during last year’s breach.
“Today, I have uploaded the Okta database for you all, This Breach is being shared in behife @IntelBroker – [Cyber <redacted>] thanks for reading and enjoy!,” a threat actor posted to a hacking forum.”
Read more at Bleeping Computer.
While Okta did not know the source of the data, Bleeping Computer reports the data was tracked down to a July 2023 breach by a threat actor known as “IntelBroker,” who claimed that the data came from National Defense Information Sharing and Analysis Center. That claim does not appear to have been confirmed.
This certainly would not be the first time that fake data compiled from multiple sources was listed for sale on a hacking forum. The seller appears to have a positive reputation on the forum but could be banned for scamming if Okta’s response is accurate.