Seven arrests but Lapsus$ is still in operating -Okta and Globant UPDATED

This was first posted on 30 March 2022

There have been arrests associated with the Lapsus$ extortion gang but it appears they have run a new attack – attacking a software consultancy Globant based in Luxemburg:

Lapsus$ extortion gang pulls new heist, say researchers • The Register

This article also looks at the way Okta has/is mishandling the Lapsus$ attack against them.

Update

It appears that 70GB of data was stolen from Globant:

IT giant Globant discloses hack after Lapsus$ leaks 70GB of stolen data | Ars Technica

Globant confirms reports of breach after Lapsus$ shares 70GB of stolen files – The Record by Recorded Future

Okta issues seem to originate from legacy systems.

Sitel blames Okta breach on ‘legacy’ network from acquisition – The Record by Recorded Future

Further Reading

Lapsus$ cybersecurity attacks