Data Breach Exposes Customer Passwords And Encrypted Data

Hackers break into centralized password manager OneLogin

Following the recent rise in data breaches that have already hit companies like Yahoo, Dropbox, and Telegram, it now seems OneLogin is the latest to join the list as the company reported Wednesday an "unauthorised access to OneLogin data in our United States data region".

OneLogin disclosed the hack in a blog post but didn't specify the data accessed in the breach.

OneLogin offers a single sign-on and other authentication management services it says gives "employees, customers and partners with secure access to your cloud and company apps on any device".

"OneLogin believes that all customers served by our USA data center are affected and customer data was potentially compromised", the email to ZDNet states.

OneLogin later updated its post about the latest security incident, saying the facts are subject to change as the incident is investigated, but revealed the method of attack. OneLogin was not alerted to the unusual database activity generated by the attacker until around 9:00 a.m. PST, but the breach was shut down within minutes afterward.

It's unclear how many people were affected by the cyberattack - hackers may have also been able to decrypt users' personal data. A message sent from OneLogin to its customers said "customer data was compromised, including the ability to decrypt encrypted data".

Kunitz's double-OT goal sends Penguins back to Stanley Cup
Boucher favors discipline over daring, and while the stat sheet looked awfully one-sided in Game 6, the scoreboard did not. The victor earns a berth to the 2017 Stanley Cup Final to play the Western Conference champion Nashville Predators .

The downside to password managers is that they become a single point of failure, and it is that downside that caught up with enterprise software firm OneLogin earlier this week.

What's most worrying is that while the company says it encrypts "certain data at rest", it could not rule out the possibility that the hacker also obtained the ability to decrypt the data.

OneLogin is now working with independent third-party security experts and law enforcement to investigate the intrusion.

More in-depth instructions for account security can be found here. After OneLogin customers sign into their account, the service takes care of remembering and supplying the customer's usernames and passwords for all of their other applications.

Gizmodo reached out to OneLogin for comment on yesterday's breach, but had not heard back at time of writing.

Related News:

  • United States  and Japan stage military exercises in Sea of Japan

    United States and Japan stage military exercises in Sea of Japan

    Washington and Seoul already have established operation plans made on the assumption of all-out war with Pyongyang. Japan has also been pushing to increase pressure on Pyongyang through working with other countries.
    Scott Pelley Is Reportedly Out as Anchor of CBS Evening News

    Scott Pelley Is Reportedly Out as Anchor of CBS Evening News

    Mason has been a top fill-in for Pelley on the program, and could wind up as Pelley's replacement, THR notes. Tuesday night, the magazine, Page 6 reports Pelley is being moved to a role exclusively with '60 Minutes'.
    Cavs blow out Celts to reach finals

    Cavs blow out Celts to reach finals

    I know that both sides are relatively exhausted at this point of the season, but that just makes it an even playing field. With Iguodala hurting, and Durant playing more of a rim protector role this year, Green seems like the next best option.
  • North Korea conducts new ballistic missile test

    North Korea is still thought to be several years from its goal of being able to target USA mainland cities with nuclear ICBMs. North Korea has said its latest ballistic missile launch was a success, South Korean media reported today.

    LeBron undaunted by challenge of facing Warriors in Finals

    We match up well with them, and I think they'd say the same about us", Love said after Saturday's practice session, via ESPN . Cleveland-Golden State 3.0 is the matchup fans worldwide expected and wanted, and James believes they're in for quite a show.
    White Sox add Cuban OF Robert in deal that costs team $52M

    White Sox add Cuban OF Robert in deal that costs team $52M

    He followed up a six-inning effort at Seattle by limiting a Detroit lineup sans Ian Kinsler and Miguel Cabrera to four hits. The Tigers jumped out to a 1-0 lead in the second inning when Justin Upton scored on a groundout by John Hicks .
  • Modi inaugurates India's longest river bridge in Assam

    Modi inaugurates India's longest river bridge in Assam

    Till now, the only means to cross the Brahmaputra at this location has been by ferry, that too only in day-time. It will open up doors for economic development. "New waterways will start from here", the prime minister said.
    Rahul Gandhi leaves for violence-hit Saharanpur despite no permission

    Rahul Gandhi leaves for violence-hit Saharanpur despite no permission

    On May 5, a person was killed and 16 other were injured in clashes between Dalits and Rajputs in Shabbirpur and Simlana villages. Violence first broke out in Saharanpur about 40 days ago following a procession to mark Ambedkar Jayanti.

    U.S. military acknowledges over 100 civilians died in Mosul strike in March

    Air Forces Central Command, disputed that. "The coalition takes every feasible measure to protect civilians from harm", he added. The coalition does not usually compensate civilians for accidental strikes, with the exception of occasional sympathy payments.
  • Transgender student wins bathroom lawsuit

    Transgender student wins bathroom lawsuit

    In September 2016, District Court Judge Pamela Pepper ruled in the teen's favor, instructing the school to accommodate Whitaker . Circuit Court Judge Ann Claire Williams .

    Computex: AMD unveils 16-core Ryzen 9 1998X 'Threadripper' and X399 platform

    The Ryzen mobile processor is a step ahead in terms of CPU performance and is 40% better on graphics than AMD's current products. All desktop Ryzen processors , including the upcoming budget-oriented Ryzen 3 lineup, have been certified as Oculus VR ready.

    Gianforte Wins Montana Special Election After Misdemeanor Assault Charge

    Both candidates in the Montana contest were seen as flawed, but Quist in particular was a weak recruit for Democrats. The apology came after several GOP lawmakers called for Gianforte to say he was sorry to Jacobs.


Most liked

SEC tweaks graduate transfer rules, opening door for Zaire
SEC commissioner Greg Sankey said the league wasn't making any decisions "based on an individual". That put coach Jim McElwain's program on probation for three years.

Incredible: 12-year-old shocks judges with ventriloquism
But Darci and Petunia's charisma were so irresistible that Mel B . just had to put them through then and there. And we can't decide what was better-her performance or her heartwarming reaction to Mel B's praise.

What Would the Paris Climate Deal Look Like Without the United States?
Typically, liberals say climate change is the most egregious and alarming cataclysm this world has ever come to know. Spokesman Dmitry Peskov added that its implementation will not be as effective "without the key signatories".

China, EU seek to deepen relations
Speaking in Berlin about the Paris climate change accord, he said: " China in recent years has stayed true to its commitment". Chinese Premier Li Keqiang says fighting climate change is a "global consensus" and an "international responsibility".

Trump administration may return USA compounds to Russian Federation
This construction was suspended after America imposed sanctions on Russian Federation in 2014 for its invasion of Ukraine. Besides that, U.S. authorities expelled 35 Russian diplomats and shut down two Russian compounds in NY and Maryland.

Serena Williams to have baby girl, says Venus
Kvitova threw her racket in frustration after she double-faulted on match point, but the players warmly embraced at the net. The two-time Wimbledon champion hit 31 winners and nine aces as she became the first woman through to the second round.

Arsenal set to rubber-stamp new Arsène Wenger contract
Arsenal fans praise Arsene Wenger , throw shade at Spurs and rejoice in beating Chelsea after winning the FA Cup . We are committed to mounting a sustained league challenge and that will be our focus this summer and next season.

Sean Spicer 'fuming' after getting axed from Trump's Papal visit, says source
Since Inauguration Day, the inscrutable first lady Melania Trump has been scrutinized for any sign of her interior monologue. The president, accompanied by his wife and several aides, arrived at the Vatican just after 8 a.m. local time.

South Korea military suspects object crossing border was North Korean balloon
Last Sunday, the North's military tested another medium-to-long range ballistic missile , the Pukguksong-2. If so, it wouldn't be the first time Seoul has reported a drone crossing over the border from the North.

UK: Manchester attack investigation still at 'full tilt'
Armed police on guard prior to the start of the Great CityGames at Deansgate, in Manchester , England, Friday May 26 , 2017. Manchester is slowly returning to normal, though the damaged arena and adjacent Victoria train station remain closed.

Tyrrells 'surprised' at Schapelle Corby's bag
Denpasar police spokesman Sugriwo said about 200 officers had been preparing for several days. She was ushered into the airport through a gate usually reserved for the airforce.

Why was Ford CEO Mark Fields fired - err, retired?
Profits in the first quarter dropped sharply, and the company's share price has dropped almost 40 percent since Fields took over. Reporting to executive chairman Bill Ford , Hackett will lead Ford's worldwide operations and 202,000 employees globally.

Phoenix police: Comicon suspect threatened police, performer
Mercedes Fortune, a spokesperson for the Phoenix police, issued the following statement as reported by The Hollywood Reporter . A witness told them Sterling sent them a Facebook message stating he was threatening to shoot officers and was heavily armed.

'Only BJP can build Telangana of freedom fighter's dreams'
Central ministers, foreign diplomats and other state governments have also appreciated the state's progress, he added. And since the state's formation till date, we have received only Rs67,390 crore through central devolutions.

Philippines, China play down Duterte's talk of war in disputed sea
The Philippines, a former American colony, had been one of the United States' key allies in the Asia-Pacific for decades. According to Abella, Duterte maintains a two-track approach to the country's relationship with the Asian giant.