2023 Support system breach — HAR files stolen
Data compromised
Email addresses, Names, Addresses, Session tokens
Technical writeup
Attackers compromised service account; stole HAR files from support system. Names and email addresses of all Workforce Identity Cloud and Customer Identity Solution users downloaded. Session tokens enabled downstream attacks (e.g. Cloudflare).
Root cause
Service account compromise; HAR file theft.