OneLogin Breach Compromised Customer Data, Ability to Decrypt Encrypted Data

Enterprise ID management firm One Login covfefes to security breach

Yet the one-sign-on, password management company OneLogin confirms that customer data has been hacked and likely decrypted. OneLogin claims that they encrypt sensitive data, however they also state that it's possible the intruder also gained access to the ability to decrypt it, but they also may not have. Not anymore. OneLogin has posted a note on its website, which is a good thing, in which it explains that it is shocked and that it has called in the police already. "OneLogin staff was alerted of unusual database activity around 9 am PST and within minutes shut down the affected instance as well as the AWS keys that were used to create it".

In 2013 the company announced it had reached a user base of 12 million, including 700 corporate customers.

To make matters worse, OneLogin now can't rule out the possibility that the attacker also managed to get hold of a data decryption tool.

Some of these steps include generating new desktop single-sign-on tokens for users, forcing password resets and generating new application programming interface keys.

Phoenix police: Comicon suspect threatened police, performer
The suspect - whose name hasn't been released - was carrying four guns - including a shotgun, knives and ammunition, police said. However, this did not seem to occur on Thursday, with the armed man slipping through into the convention while fully armed.

"While we encrypt certain sensitive data at rest, at this time we can not rule out the possibility that the threat actor also obtained the ability to decrypt data", Hoyos added. Late on June 1, the company provided more details, revealing that attackers had infiltrated OneLogin's cloud backend and had unfettered access for seven hours prior to being detected. "We want our customers to know that the trust they have placed in us is paramount", Hoyos wrote.

For this reason, customers were advised to change their passwords, generate new API keys for their services, and create new tokens used for logging into accounts. "We have since blocked this unauthorised access, reported the matter to law enforcement, and are working with an independent security firm to determine how the unauthorised access happened and verify the extent of the impact of this incident", said Alvaro Hoyos, chief information security officer at OneLogin.

The attack occurred on May 31 around 2am PST (09:00 GMT), according to OneLogin.

Related News:

  • Social media rushes to define Trump's 'covfefe' tweet

    Now that the trip is history, though, it's clear the presidential tweeter is back in full, with " covfefe " and more. Trump poked fun at the typo, tweeting around 6 a.m., "Who can figure out the true meaning of "covfefe"??? ".
    Donald Trump meets Pope Francis at the Vatican

    Donald Trump meets Pope Francis at the Vatican

    As Mr Trump and the pope said goodbye at the door of the study, Mr Trump told him: "Thank you, thank you". And the president thinks there's another reason why they will get on. "We had a fantastic meeting".
    Manchester police arrest man, 25, in bomb probe

    Manchester police arrest man, 25, in bomb probe

    That brings to 11 the number of suspects held over the Manchester Arena attack that was claimed by the Daesh terror group. I heart Manchester signs were dotted around the city, and runners set off under the banner #RunForManchester.
  • Gujarat Board SSC Class 10th Result 2017

    Gujarat Board SSC Class 10th Result 2017

    In their press release, the Gujarat Board had clearly stated that the results will be out on their official website. Stay tuned to this website. we will update Gujarat Board SSC Pass Percentage, supply exam dates here.
    James Passes Jordan, Cavs Back In Finals With 135-102 Win

    James Passes Jordan, Cavs Back In Finals With 135-102 Win

    Can James win his fourth ring? Durant certainly wasn't the first player to seek an instant championship through free agency. I know that both sides are relatively exhausted at this point of the season, but that just makes it an even playing field.
    India's longest bridge brings Assam closer to Arunachal Pradesh

    India's longest bridge brings Assam closer to Arunachal Pradesh

    We are giving stress on development of roads, bridges, rails, air and waterways which are environment- friendly and economical. Communist Party of India (CPI) has termed the three years of Narendra Modi led BJP government as 'three years of disaster'.
  • Netanyahu: Trump Visit To Western Wall 'Destroyed UNESCO's Lies'

    Netanyahu: Trump Visit To Western Wall 'Destroyed UNESCO's Lies'

    Prior to the Manchester terror attack, Trump explained in his speech in Saudi Arabia that America alone "cannot crush this enemy". Trump is visiting Jerusalem and West Bank on the second part of his maiden foreign trip since taking office in January.

    Trump's evangelical supporters disappointed about Israel embassy decision

    Trump's decision came hours after administration officials said he was considering pulling the US out of NAFTA altogether. Israel considers Jerusalem its capital, but the Palestinians claim east Jerusalem for the capital of a future state.

    Moses is not a cheat - Conte

    The only bit of advice I have for young coaches, if you have a tendency to be paranoid don't do this job. I don't think they're going to be anywhere near the title.
  • To many Americans, Memorial Day has lost its meaning

    The preferred name for the holiday gradually changed from Decoration Day to Memorial Day , which was first used in 1882. But in the midst of it all we should never forget that many have died so that we can enjoy such pleasures.
    The buzz in the Bronx for Derek Jeter Day

    The buzz in the Bronx for Derek Jeter Day

    As CBS2's Ali Bauman reported, the Yankees will also unveil a Monument Park plaque honoring Jeter at Yankee Stadium. Astros-Yankees game postponed; teams will play doubleheader Sunday when Derek Jeter honored.
    114 arrested in immigration sweep in PA

    114 arrested in immigration sweep in PA

    A convicted rapist and previously deported cocaine trafficker were among those arrested in that region, according to ICE. The crackdown took place in Los Angeles, Orange, Riverside, San Bernardino, Santa Barbara and Ventura counties.


Most liked

Girl's singing ventriloquist act on 'America's Got Talent' blows away judges
Darci Lynne Farmer's ventriloquism act is going viral after receiving the Golden Buzzer on " America's Got Talent! ". Although no one else earned themselves a golden buzzer, nearly all of the acts were put through to the next round.

Pelley out as "CBS Evening News" anchor
But sources told The Post that the network decided not to renew Pelley's contract after unsatisfactory ratings during his tenure. Page Six had previously reported in December that Pelley might be on his way out of the anchor chair position on the show.

Here's what the Wisconsin transgender bathroom ruling means for other cases
Whitaker was in junior high school when she decided "to openly identify as a boy", the court explains. The Kenosha Unified School District had appealed U.S.

Phil Jones: This season proves Man Utd on way back
The European triumph followed the EFL Cup and Community Shield wins has Jones upbeat about next season. Juan Mata has admitted that a lack of consistency cost Manchester United this season.

USA to test missile defense after North Korea warns of 'gift'
North Korea has attempted seven missile tests in 2017, including two recent tests in one week alone, keeping the world on edge. Under the supervision of Kim Jong Un , North Korea fired a short-range ballistic missile off its east coast Monday morning.

PlayStation 3 Production Ends in Japan
The leak about PlayStation Plus June 2017 games lineup also suggests that both of these games will be available on PlayStation4. Entertainment's Life Is Strange video game is rumored to be a part of PlayStation Plus June 2017 free games lineup.

North Korea missile test is huge step forward
He added: "We need to return to dialogue with North Korea and stop scaring it and find ways to resolve these problems peacefully". Following that launch, Washington began talks with North Korean ally China on possible new United Nations sanctions.

Korea calls S. Korea's border firing reckless provocation
The United States, Britain and France have been pushing for a new U.N. resolution with tougher sanctions against North Korea . South Korea says it has fired warning shots at an object that flew across the demilitarised zone from North Korea .

Gianforte wins in Montana; apologizes to reporter
Jacobs captured audio of the encounter which began with Jacobs asking Gianforte about the congressional health care bill. Gianforte's support came from people like Bozeman advertising executive Cailley Tonn, who voted early for Gianforte.

Schapelle Corby's first Instagram post
Captain Sugriwa said the protection has been ordered by Bali's police chief to ensure a safe deportation of the Australian . He last saw Corby at Kerobokan prison in February 2014 when she underwent a medical test before being granted parole.

Tigers at White Sox
The Tigers opened the scoring when John Hicks drove in Justin Upton on a groundout in the top of the second inning. On Sunday, Miguel Gonzalez starts for the White Sox and Jordan Zimmermann for the Tigers.

Lib Dem's Pledge "Zero Waste Act" in Election Manifesto
The offer being made by the Lib Dems is framed around its fears over what the Conservative Party could do should it retain power. It would see monthly rents used like a mortgage, with working tenants buying a share of their home over a 30-year period.

Wreckage of IAF's missing Sukhoi-30 found, no word on pilots
Indian Air Force today ordered an inquiry to investigate the crashed Sukhoi jet, whose wreckage was found today near Assam. The IAF station here is strategically-located as it lies surrounded by China, Bhutan, Myanmar and Bangladesh.

Rahul Gandhi to visit strife-hit Saharanpur despite being denied permission
He plans to visit Shabbirpur village, the epicentre of clashes between Dalits and Thakurs or Rajputs since last month. On Thursday, the Centre sought a report from the UP government on the continuing violence in Saharanpur.

Kunitz's double-OT goal sends Penguins back to Stanley Cup
That belonged to the 37-year-old Kunitz, who didn't score a goal this postseason until he found the net in the second period. Erik Karlsson - Ottawa's superstar defenceman had a pair of assists and played a game-high 39:33 in the Game Seven loss.