OneLogin controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile2 entries
2017
Unauthorized access in the US data region
On May 31, 2017, OneLogin detected and stopped unauthorized access in its United States data region. The incident was significant because of the role identity providers play in controlling access to customer applications and systems.
2016
Unauthorized access to log-storage and analytics system
In August 2016, OneLogin reported that an unauthorized user had accessed a standalone system used for log storage and analytics for a month or more. The company said unencrypted Secure Notes may have been visible and reported correcting a cleartext logging bug.