Okta's Involvement in Cyber Attacks on Las Vegas Casinos Confirmed

Okta's CISO, David Bradbury, confirms that the recent cyber attacks on Las Vegas casinos MGM Resorts and Caesars Entertainment exploited Okta's technology as an access vector. The attacks were carried out by the threat actor UNC3944, likely affiliated with the ALPHV/BlackCat ransomware operation. Okta is working with law enforcement and cooperating with investigations. The company has been a target of UNC3944 for over a year, with a recent increase in social engineering attacks against its customers. Stolen Okta credentials linked to over 500 other companies, including Adobe, Diageo, and Epic Games, may be in the possession of UNC3944.