> (Blames vendor for) “a five-day window of (vulnerability) between January 16-21, 2022” which $Okta waited *9 weeks* to disclose because (blames third-party security firm). No accountability to see here folks, run along.
>
> [...]

https://twitter.com/jeisensc/status/1506333393172131840

*Updated Okta Statement on LAPSUS$*
https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/

*Fury As Okta—The Company That Manages 100 Million Logins—Fails To Tell Customers About Breach For Months*
https://www.forbes.com/sites/thomasbrewster/2022/03/22/fury-as-okta-the-company-that-manages-100-million-logins-fails-to-tell-customers-about-breach-for-months
https://archive.ph/En1Xk