{"id":1774,"date":"2017-06-01T13:42:05","date_gmt":"2017-06-01T17:42:05","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=1774"},"modified":"2017-06-01T13:42:05","modified_gmt":"2017-06-01T17:42:05","slug":"onelogin-breached-again-may","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/onelogin-breached-again-may\/","title":{"rendered":"OneLogin Reports Breach and “Unauthorized Access” to Data"},"content":{"rendered":"

\"\"<\/p>\n

IDaaS provider OneLogin has reported a security incident resulting in “unauthorized access” to\u00a0OneLogin data in the US Data Region, according to a blog post<\/a> published by \u00a0OneLogin CISO Alvaro Hoyos yesterday.<\/p>\n

The company’s statement offered few details on the breach, only that the company has since blocked this unauthorized access, reported the matter to law enforcement, and are working to investigate the breach with another independent security firm. However, the company also mentions that it has\u00a0reached out to impacted customers with specific recommended remediation steps.<\/p>\n

In those emails, and related support-page<\/a> (password-protected, but visible here<\/a>), the company gave more details about the breach, and revealed that \u201call customers served by our US data center are affected; customer data was compromised, including the ability to decrypt encrypted data.<\/strong>\u201d … That’s kind of a big deal.<\/p>\n

The companies support page offers a long list \u00a0of actions to take in order to secure their accounts, including:<\/p>\n

\n

Holy shit. #OneLogin<\/a> clients… tomorrow is gonna be a long day. pic.twitter.com\/grNJwAlnYq<\/a><\/p>\n

— D\ud83c\udf69M (@nerdybeard) June 1, 2017<\/a><\/p><\/blockquote>\n