A file containing the data of almost five thousand (former) Okta employees was stolen. This was done through Rightway Healthcare, a third party provider.

The American identity and access management company Okta had to report to almost five thousand (former) employees that their data had been stolen. This happened due to an incident at third-party provider Rightway Healthcare. This is a company that helps compare health insurance companies.

Slow start

The victims were notified via a message, a basic version of which was seen by The Register. The stolen file contains:

• names
• Social Security Numbers
• Health or medical insurance policy numbers

On September 23rd, an attacker managed to break into Rightway Healthcare’s IT environment, but the organization did not notify Okta until October 12th. An investigation was immediately launched, according to security chief Ronald Anderson.

To address concerns, Okta told victims that there was no evidence that the data had actually been misused. Still, they get two years of free credit monitoring, identity restoration, and access to fraud detection services.

Closer to home

This time it was about (former) Okta employees, but the company itself recently proved to be no Fort Knox for digital data. Last month it emerged that attackers were able to view customer data following a cyber breach. This incident also had consequences for 1Password.

Last year, criminals even stole parts of the source code via GitHub. No customer data was compromised.