Okta’s support system was infiltrated in 2023, enabling the theft of session tokens hidden in HAR files and the impersonation of users across high-security organizations. Undetected for two weeks, the breach exposed identity infrastructure at its core.