The really worrying thing about this is that Okta’s announcement fails to mention several factors which paint them in a bad light, like the fact they sat on a report about this compromise for 16 days.
Surely you’re not suggesting that the company whose CEO denied being compromised for a week or so (before relenting and playing semantics games about whether it was “really” a leak or a hack) _might_ not be real trustworthy about disclosure…
