This has specifics: https://blog.1password.com/okta-incident/