Okta, Inc. notified the New Hampshire Attorney General of a data security incident involving its third-party vendor, Rightway Healthcare, Inc. A targeted SIM swap attack on a Rightway employee on September 23, 2023, led to unauthorized access to an eligibility census file. The incident impacted 16 New Hampshire residents, exposing personal information. Okta discovered the breach on October 5, 2023, and began notifying affected individuals on November 2, 2023, offering 24 months of credit monitoring and identity restoration services through Experian.
Affected (this filing): 16