Leaked Okta customer data that surfaced on a hacking forum last weekend does not appear to come from Okta.

Okta, a provider of cloud solutions for identity and access management, suffered a cyberattack late last year in which hackers gained access to Okta customer data. Shortly thereafter, Okta employee data was stolen, and it was discovered that the breach was caused by an employee’s personal Google account. A few weeks later, customer data was also stolen. Last weekend, attackers said they had posted Okta customer data on a hacker forum. According to Okta, this data does not come from their systems, but was taken from the Internet.

Leaked customer data did not come from Okta

On Saturday, a notice appeared under the pseudonym “Ddarknotevil” saying the company would release an Okta database containing data from 3,800 customers stolen in last year’s breach. Leaked data from the incident late last year included user IDs, full names, company names, office addresses, phone numbers, email addresses and job titles.

According to Okta, the leaked data did not come from their systems, but apparently from the Internet. So it would not be related to the security incident at the end of last year. They noted that some fields in the leaked data dated back more than a decade and that after a thorough investigation, no evidence of a breach was found in Okta’s systems.

The cyber intelligence agency KELA also confirmed that the data does not belong to Okta, but probably to another company that fell victim to a cyber incident in July.