OneLogin Reports Unauthorized Access, User Data Compromised

The breach affects all customers "in the USA data region", but it's unclear how long the sensitive information was available.

OneLogin's blog does say that customers have been told what to do in the wake of the attack and the email we've seen does "strongly advise" customers to visit support page to which we have linked. Based on the severity of the hack, it seems OneLogin has the ability to access all client data-something other companies intentionally can't do specifically to avoid scenarios like this.

If you are a OneLogin user then you will want to keep an eye on your various accounts and possibly change passwords for any sensitive accounts. Hackers have gained access to OneLogin, an online password manager that offers a single sign-on to multiple websites and services.

In addition to forcing a password reset the company is also instructing customers carry out a lengthy list of actions, including generating new certificates for apps that use SAML SSO - a standard for logging users into apps based on their sessions.

'As we communicated yesterday, we recently detected that a malicious actor had obtained access to our U.S. operating region, ' Hoyos explains.

"OneLogin's investigation is ongoing, and is aided by independent third-party security experts, as well as law enforcement", Hoyos said.

"Am I the only 1 to find it disturbing OneLogin had a decryption method for customer data accessible enough to be grabbed via breach?" said one user on Twitter.

OneLogin boasts that its service allows employees to set and reset their own passwords without having to go through the information technology department, which sounds like an attractive option for companies looking to reduce their IT workload. This is probably unfortunate for the company, because presumably normally things all run OK, and users do not get breached and do not get contacted with advice about what they hell they ought to be doing about it. When a breach like this occurs, hackers potentially hold the keys to the kingdom.

It's the second such breach in as many years.


Popular
  • Goldman Sachs CEO tweets for the first time, slams Trump's Paris decision

    Goldman Sachs CEO tweets for the first time, slams Trump's Paris decision

    He described the decision as a "setback for the environment and for the US's leadership position in the world". Investors are taking a different view, however. "It snowed over 4 inches this past weekend in New York City".
    The Square by Sweden's Ruben Ostlund wins Palme d'Or

    The Square by Sweden's Ruben Ostlund wins Palme d'Or

    Most odds makers didn't have The Square' as a favorite to win the prestigious Palme d'Or , the top prize awarded at Cannes .
    Manchester terror blast - Police conduct search in St Helens

    Manchester terror blast - Police conduct search in St Helens

    Manchester slowly returned to normal, though the damaged arena and adjacent Victoria train station remained closed. Security is being increased at football cup finals at Wembley Stadium in London and the Great Manchester Run.
  • I had faith in my bowlers during death overs: Rohit Sharma

    I feel that is the most critical part of winning a tournament", he said. "An outstanding performance all round", Johnson said. So our talk was that we try and make 140 so we may even get to 160.
    5 things we learned from Arsenal's FA Cup final win over Chelsea

    5 things we learned from Arsenal's FA Cup final win over Chelsea

    He added: "I said it many times, when we hear the word " Arsenal ", the first name we think is Arsene Wenger ". We'll see in the next few days. "We owe him a lot". "There is only one team [Atletico] I could go", he said.
    Government will not go back on its promise on black money: Modi

    Government will not go back on its promise on black money: Modi

    Amit Shah said that he supported the decision of Army Major Leetul Gogoi's to use a "human shield" in Kashmir as it saved lives. Prime Minister Narendra Modi's "abrupt" decision of recalling old notes has benefited India's $2 trillion economy.
  • 'Dancing' black holes yield LIGO's third detection of gravitational waves

    'Dancing' black holes yield LIGO's third detection of gravitational waves

    This happens when light waves in a physical medium travel at different speeds, depending on their wavelength. Animation of the inspiral and collision of two black holes consistent with the masses and spins of GW170104.

    Europe can no longer rely on US, Britain: Merkel

    But they carry extra heft now that Trump is actually in office - and after Trump had a days-long opportunity to reset relations. President Donald Trump (R) as they attend a G7 expanded session during the G7 Summit in Taormina, Sicily, Italy, May 27, 2017.

    Underdog Cavs insist they have plenty of bite for Finals

    It's the matchup most expected, the matchup most predicted, and probably the matchup the Cavaliers and Warriors wanted, as well. OddsShark.com posted its NBA Finals MVP odds on Tuesday, even before the Cavs clinched the Eastern Conference title again.
  • Trump criticises Germany after Merkel questioned United States reliability

    The U.S. -German relationship has been a crucial check on Russian Federation for decades, but it appears to be fraying. Merkel is scheduled to meet with China's Prime Minister Li Keqiang on Wednesday.
    Trump's North Atlantic Treaty Organisation  debut does little to assure allies

    Trump's North Atlantic Treaty Organisation debut does little to assure allies

    From handshakes to hand swats, here are the top four awkward body language moments from Trump's first trip overseas . As he tried to reach the front of the group, Montenegro's Prime Minister Dusko Markovic was standing in his way.
    Trump taking unique Saudi-to-Israel flight

    Trump taking unique Saudi-to-Israel flight

    But Trump departed for Europe having offered no real indication of a path forward on one of the world's most intractable disputes. President Trump stressed the deep and longstanding ties between the US and Israel during a speech in Jerusalem this morning.

CONNECT