Okta CSO affirms no breach in Webinar

I mean, the official statement admits the attacker was in the system from January 16-21, 2022. During that time, he says they also had access to Slack, Splunk, and Jira. We know they grabbed some sort of AWS keys at least from Slack. Who knows what other sort of info was posted there that they grabbed. Organizations play fast and loose with Slack all the time and not a lot of orgs purge Slack conversations routinely.

Plus with Jira and Splunk, that’s a goldmine of info.

So is that really not a breach?

Okra CSO affirms Oceania has always been at war with Eurasia.

Their systems were breached, but there was no breach, they never had been any breach.

This is ridicules. And the CSO’s stance is damaging them a lot more than the actual breach.

In the face of a situation, honesty and transparency should be your top priorities. Trying to lie, shape incorrect headlines and bend the meanings of words to mislead is never the way to go.