Okta
Disclosed 2023-10-20 · 134K accounts
Customer-support case-management compromise; HAR files containing session data exposed.
Data classes exposed
- Email address
- Username / handle
- IP address
Source: Okta security advisory. Read disclosure ↗
Breach exposure
Public breaches involving Okta
Cross-matched against the WhatTerms breach catalog. Each entry links the breach disclosure, names the data classes confirmed exposed, and matches each class to a concrete recovery action — not just “your email was leaked”.
Recovery actions
Sorted by severity. Each action maps to one or more data classes confirmed exposed across the breaches below.
Switch this service to a per-service email alias and treat the leaked address as compromised.
MediumExposed emails feed phishing campaigns and credential-stuffing lists.
Audit accounts where you reuse this handle; assume it can be cross-correlated.
MediumHandle reuse links pseudonymous accounts back to your real identity.
Recognize that geographic and ISP correlation is now possible; consider VPN for sensitive sessions.
MediumIP addresses tie to physical and ISP-level identity.