All affected customers are now being informed that their data has been hijacked and they should be particularly vigilant.

Okta wasn’t having a particularly good time. After hackers managed to capture some of the source code late last year, customer data from organizations or people who contacted the help desk is now available. Hackers were able to sneak into Okta systems using an employee’s personal Google account.

After it was previously announced that the data of almost five thousand (former) employees had been stolen, hackers now also have customer data. “While we have no direct insight or evidence that this information is being actively misused, we have informed all of our customers that this file poses an increased security risk through phishing and social engineering,” Okta said.

Specifically, this is data such as names and email addresses that the helpdesk needs to further support customers. The company does not provide any precise information about what other data was collected.

The announcement of the news already gives the company a boost in reliability when it comes to SSO and MFA to securely log in to online applications. Not only Okta itself is affected by this hack, but also partners such as the password manager 1Password, which uses Okta and was recently able to intercept an attempted break-in thanks to the hack.