Okta — stolen service account token → support-system compromise

A leaked service account credential (a Google account used by an Okta employee) gave attackers access to Okta's support case-management system. Customer HAR files with session tokens were accessed, enabling downstream compromise of Okta's customers.