3 ms·

I didn't find this misleading at all. Just a chronology of their evolving understanding.

• nopcode 5y ago
  They could just state that there was also a successful login. So far they don't do that.
• lIIIllllIIII 5y ago
  It's misleading because grammatically, what one would usually say in this situation is something like "Okta detected what it believed at the time was an unsuccessful attempt", because the statement's narrative is set in the present - and we now know the attack (not "attempt") was successful. Wording it as they did in their statement obfuscates the events that took place, and certainly reads like a deliberate attempt to downplay the severity of the breach.