Okta’s Investigation of the January 2022 Compromise

Re:Okta’s Investigation of the January 2022 Compromise by chippiewill on Wednesday March 23, 2022 @05:39AM (#30776680)

The compromised tenant looks like it was specifically _not_ one of the EMEA ones so GDPR wouldn't be relevant here.

[ Parent | on HN ]

Re:Okta’s Investigation of the January 2022 Compromise by jbrownbridge on Thursday March 24, 2022 @02:10AM (#30786785)

I think the issue is that they just wouldn’t know. They didn’t know which customers were impacted. They didn’t know which users personal data might have been compromised. They most likely don’t have the ability to determine whether a user is a EU resident or not as this information would reside with their customers HR systems which all points to having to notify to avoid the legal complications.

[ Parent | on HN ]

Re:Okta’s Investigation of the January 2022 Compromise by EwanToo on Wednesday March 23, 2022 @05:47AM (#30776736)

If the tenant had 1 or more European employees in their system, then yes GDPR is likely relevant.

[ Parent | on HN ]