3 ms·

Having a breach where they provide absolutely no details about the breadth or depth of the breech makes this even worse. Onelogin's essential promise is to be

Having a breach where they provide absolutely no details about the breadth or depth of the breech makes this even worse. Onelogin's essential promise is to be a service so secure that they can be trusted to store your clear, plain-text passwords for all your other services.... Our CISO is going to have a hard time defending continued use of this service.

senectus1 9y ago
Not a user of this service But honestly I think they've done very well. It was detected today, they shut it down, they have reported it and gotten a third party to assist in investigating it. What are you expecting ? 100% disclosure before they know the full accounting themselves? I see no point in disclosing information they haven't verified as being accurate and relevant. They can't verify and vet the information that quickly... Posting incorrect information is just as bad as posting not enough. I think they're doing exceedingly well in comparison to most other organisations in this space.