Secure Email Programs & OneLogin’s Data Breach

OneLogin is an online platform formed in 2010 and based in San Francisco, California.  It allows customers to use a single password to access multiple sites and applications.  This online platform, recently suffered an unexpected data breach in its U.S. data region, affecting its widespread customer base and by association, their secure email programs. Security experts said the recent breach of data suffered by OneLogin was “embarrassing” and showed that every company is open to this type of malicious attack. OneLogin provides its customers with single sign-on and identity management services, allowing users to access multiple cloud-based apps, and various sites with just one password.

newnewThe company stated the data breach affected all of its customers served by their U.S. data center, and noted that the perpetrators had the ability to decrypt encrypted data. OneLogin was able to block the unauthorized access to its data once the breach was discovered.  They reported the breach to law enforcement officials and are working with a private security firm to pinpoint the method of entry and verify the impact of the incident.

Considering OneLogin provides access to services and apps such as Amazon Web Services and Microsoft Office 365, one of the world’s most used secure email programs.  This crime opens up these services to unauthorized access to the perpetrators of this cybercrime.

By gaining unauthorized access to OneLogin’s systems, the hackers have effectively stolen a master key into customer accounts. This includes previously secure email programs. Security for email is a vital element for both personal and business email users, which is essentially every OneLogin customer. The hacker’s ability to break business email encryption is legitimate cause for great concern.

We at NeoCertified understand this concern, and encourage consumers to use lengthy passwords with both upper and lower-case letters, add numbers and special characters, and change passwords on a consistent basis, never using the same password for multiple accounts. As the recent breach demonstrates quite clearly, using a password manager and keeping all of your passwords in one location means opening your computer applications and secure email programs up to the possibility of an attack, and running the risk of losing exclusive access to all your accounts in the event of a data breach.

Check out more tech-based blogs and editorials right here.

Written by Peter J. Schaub
President & CEO, NeoCertified