Password manager OneLogin suffers malicious data hack

03 June, 2017, 01:55 | Author: Jacqueline Ellis
  • Popular password manager suffers major security breach – have you been hacked?
		 0

However, some security experts have warned that having one internet-based password puts you at risk for a data breach like the one that OneLogin suffered.

In the blog post, OneLogin chief information security officer Alvaro Hoyos said an unknown party gained unauthorized access to OneLogin's servers running in the United States.

Customer data residing in password management service OneLogin was compromised when a "malicious actor" accessed information on keys used for encryption, the firm reports.

OneLogin's blog post includes no other details, aside from a reference to the company's compliance page.

Affected OneLogin users can visit this page for a handy 11-step guide to securing your data, if that's possible, or read through it over at El Reg. OneLogin counts among its customers some 2,000 companies in 44 countries, over 300 app vendors and more than 70 software-as-a-service providers. This is probably unfortunate for the company, because presumably normally things all run OK, and users do not get breached and do not get contacted with advice about what they hell they ought to be doing about it. While the company maintains that it encrypts certain sensitive data, it didn't rule out the possibility that the "malicious actor" had the ability to decrypt them.

North Korea warns of 'big bag of gifts' following USA exercises
Japan Prime Minister Shinzo Abe vowed to take joint action with the USA against North Korea, following Monday's missile test. Japanese Prime Minister Shinzo Abe vowed to work with the United States to "take specific action to deter North Korea".

"The threat actor was able to access database tables that contain information about users, apps, and various types of keys", OneLogin said in a statement.

The company says it is "working with an independent security firm to determine how the unauthorized access happened and verify the extent of the impact of this incident". "We want our customers to know that the trust they have placed in us is paramount", Hoyos wrote.

It's unclear exactly what kind of customer data may have been compromised, but the company is urging administrators who use the single sign-on (SSO) feature to force a directory password reset for their users.

The attack occurred on May 31 around 2am PST (09:00 GMT), according to OneLogin. In many attacks, some form of directed, spear-phishing email is often found to be a root cause.

Recommended:

  • SEC tweaks graduate transfer rules, opening door for Zaire

    SEC tweaks graduate transfer rules, opening door for Zaire

    The Gators wouldn't have been able to add Zaire under the old rules because two recent grad transfers failed to make grades. The reason for the wait is to see what potential policies an NCAA transfer working group recommends on the issue.

    ACLU against effort to allow Trump travel ban

    The first, issued on January 27, led to chaos and protests at airports and in major US cities before it was blocked by courts. The Justice Department argued that the lower courts were wrong were therefore wrong to apply the enforcement ban nationwide.

    Russia Could File Financial Claim Over US Expropriation of Diplomatic Compounds

    Hammond told the Post that "U.S. and Russian Federation have reached no agreements", but Moscow is talking like it's a done deal. Kremlin aide Yury Ushakov told the Sputnik news agency that Russian Federation had the right to take back the St.
  • Trump ditches Jerusalem embassy promise, learns peace isn't easy

    President Donald Trump has temporarily waived a law requiring the U.S.to move its embassy in Israel to Jerusalem. Christians United for Israel also expressed "disappointment" with Trump's decision.
    Pope Francis, Trump meet in Vatican for private talk

    Pope Francis, Trump meet in Vatican for private talk

    US President Donald Trump has met Pope Francis at the Vatican for a short private audience on the third leg of his overseas trip. They discussed goals for the G-7 summit being held in Sicily on Friday and Saturday, the White House said.

    Jeter's No 2 retired by Yanks; Monument Park plaque unveiled

    Asked if he was ready for the challenges of being a dad, Jeter said: "No". "I was always the youngest", Jeter said, "so I figured I'd be last".
  • Florida Gov. Scott approves plan to hand out oil spill money

    Florida Gov. Scott approves plan to hand out oil spill money

    In a memo to House members, Speaker Richard Corcoran , R-Land O'Lakes, wrote that "this is an issue we believe must be addressed". That part also includes $239 million that greatly expands a teacher bonus program known as the Best and Brightest Scholarship.
    Spieth chases Lingmerth as Johnson falters at Memorial

    Spieth chases Lingmerth as Johnson falters at Memorial

    He's followed it up with four straight pars and two consecutive birdies, putting him at 13-under and six shots clear of the field. Spieth joined Daniel Summerhays at six under, while fellow Americans Lucas Glover and Justin Thomas are at five under.
    1st game of Tigers-White Sox doubleheader rained out

    1st game of Tigers-White Sox doubleheader rained out

    Chad Bell - who pitched pretty well - allowed a three-run home run to Melky Cabrera in the bottom of the eighth inning. Detroit and Chicago will make up the rainout on Saturday as part of a doubleheader starting at 1:10 p.m.
  • Pens strike back, 1-1 in Game 2 vs Predators

    Pens strike back, 1-1 in Game 2 vs Predators

    A Phil Kessel shot grazed Wilson's stick before it was knocked into the net by the skates of Nashville's Vernon Fiddler . Subban said, "We're extremely confident in him", and maybe they are. "So we're going back home ".
    Sony Ceases PlayStation 3 Production in Japan

    Sony Ceases PlayStation 3 Production in Japan

    As you can see, Life is odd and Killing Floor 2 are two of the choices players will have, the others have yet to be announced. All the PlayStation Vita fans can still have access to Laser Disco Defenders and Type: Rider via the Cross-buy feature.
    Gujrat Board Class 10 results declared today at gseb.org

    Gujrat Board Class 10 results declared today at gseb.org

    Candidates who had appeared for the examination can check the results name wise from the direct link provided below. As many as 11 lakh students appeared for the class 10 exams that were conducted between March 15 and March 25.


Popular

It's Starting: Trump Demands Israel Transfer Land to Arabs BEFORE Deal
Israel occupied the West Bank, including east Jerusalem , in the Six-Day War of 1967. "Clinton tried, Bush tried, Obama tried". He also said he's confident the alliance between Israel and the US will become greater and stronger under Trump's leadership.

Social media rushes to define Trump's 'covfefe' tweet
The original post from Trump has been retweeted more than 100,000 times. "Enjoy!" he tweeted , in an unusual display of self-deprecating humour.

Tiger Woods needs help from golfing community after arrest, says Jack Nicklaus
He needs our help . "Tiger is a friend". "I think that he's struggling". He was "co-operative" but "confused" and was "unable to walk alone".

Chicago area Memorial Day ceremonies honor the fallen
And Pace says the reception that most people give veterans now is a lot different from the days when he came back from Vietnam. Therefore, it is not surprising that by the early 20th century many states and localities had made such observances official.

UN Security Council Rips North Korea Missile Test, Threatens New Sanctions
North Korea has carried out two atomic tests and dozens of missile launches since the beginning of a year ago . South Korea's military said it could not yet verify the North's claims.

UK: Manchester attack investigation still at 'full tilt'
Only the straps of the rucksack - a bag containing tricyclic acetone peroxide, bolts and nails - are visible in the pictures. Grande said she would return to Manchester to do a benefit show to raise money for the victims and their families.

South Korea opens fire when it sees object
But North Korea's historic ally and main trade partner China said the priority was to push for diplomatic talks. In January 2016, South Korea fired warning shots at a suspected drone which turned back.

LeBron undaunted by challenge of facing Warriors in Finals
Las Vegas odds makers and basketball analysts expect the Warriors to win the best-of-seven series over the reigning NBA champions. Cavs coach Tyronn Lue said the idea that the Cavs need the underdog title as a linchpin to get ready for the Finals is misguided.

Montana Republican Who Roughed Up Reporter Wins House Seat
Since around two-thirds of votes were cast before Election Day, the effect of the assault charge against Gianforte was unclear. Montana's Republican senator and House Speaker Paul Ryan had called on Gianforte to apologize on Thursday.

Ford's new CEO promises a fit _ but fun _ company
Mulally flew home to his wife in Seattle most weekends, and Fields constantly went back and forth to his family's home in Florida. Ford Motor Co. replaced Mark Fields as its CEO following a three-year tenure Monday. "He's not just a futurist".