> “During our investigation into suspicious use of this account, Okta Security identified that an employee had signed-in to their personal Google profile on the

> “During our investigation into suspicious use of this account, Okta Security identified that an employee had signed-in to their personal Google profile on the Chrome browser of their Okta-managed laptop,” Bradbury wrote. “The username and password of the service account had been saved into the employee’s personal Google account. The most likely avenue for exposure of this credential is the compromise of the employee’s personal Google account or personal device.” Isn't the problem the fact that Google forced on people their "sign into chrome" (which is basically "sign into google") strategy? The attack wouldn't work on Firefox.