Comment by dotty-

Funny how this article points that Okta was notified by a third-party of suspicious tenant activity, Okta did not find evidence of the breach, and only after some persistence from BeyondTrust did Okta re-investigate and identify the breach.

Okta published a blog post here: https://sec.okta.com/harfiles and kicks it off with

> Okta Security has identified adversarial activity

and no mention of the notification from the third-party. Nice transparency!