The SSO company that owned the OneLogin password manager was breached by hackers!
In a brief blog post, the company's chief security officer, Alvaro Hoyos, said that he "detected unauthorized access to OneLogin data on its US servers."
The blog post does not contain any further information or technical details about the incident, and fails to mention whether the hackers have intercepted sensitive customer data, which is only mentioned in the message the company sent by e-mail to its customers, according to ZDNet.
“OneLogin believes that all customers served by the US data center are affected and customer data may have been leaked,” the email states.
Hackers, however, have the ability to decrypt encrypted data, according to a company support page that only OneLogin customers have access to (a copy of the post is on pastebin).
The company advised its customers to change their passwords, create new API keys for their services, and generate new OAuth tokens that they use to log in to their accounts. It also said they should create new security certificates. The company also said that information stored in the Secure Notes feature, which is used by IT administrators to store sensitive network passwords, could be decrypted.
Of course, questions remain about how hackers managed to gain access to such sensitive data, and why it can be decrypted….
OneLogin allows enterprise users to access multiple web applications, websites and services with a single password. The company is believed to have millions of users and serves more than 2,000 companies in dozens of countries, according to CrunchBase.
The company provides single sign-on to hundreds of different third-party applications and services, such as Amazon Web Services, Microsoft's Office 365, LinkedIn, Slack, Twitter, and Google services....
