Skip to main content
This topic has been closed for further comments. You can use the search bar to find a similar topic, or create a new one by clicking Create Topic at the top of the page.

4 replies

melvimbe
Mar 22, 2022 3:54 PM UTC

According to the article, Okta is claiming there is no evidence of an ongoing attack.  I don’t think Sonos would have evidence to the contrary at this point.

I also like to think that an Okta superuser account would not be able to access Sonos or any of the other business accounts...certainly not without those users being notified about it.   Even then, I’d hope that any Sonos employee that can access user data would require multifactor authentication.  But I don’t know.

Translate
Danny
Airgetlam
Mar 22, 2022 5:19 PM UTC

Other than access to “personal information”, I can’t see much benefit. Since there’s really nothing beyond that personal data stored about my account except on my local LAN on the speakers, I don’t see them being able to change my settings, of they actually had any access. So, they’d need to get on my local LAN to do any real “damage”, which is unlikely, since Sonos doesn’t have access to my LAN’s password, at least on the cloud. 

Yea, minimal potential for logging on here and posting using my credentials, but then I’m already spammy with my number of posts :) 

 

Translate
Bruce
James L.
Retired Community Staff
Mar 23, 2022 8:40 AM UTC

Hi all,

 

We are engaging closely with Okta to understand more as it continues its investigation. At this time we have seen no indication of suspicious activity.

Translate
Mark good posts by pressing the like button, and select the best answer on questions you've asked to help others find solutions.
sachinmaAuthor
Contributor I
Mar 23, 2022 9:18 AM UTC

Thanks everyone for the quick responses and perspectives, much appreciated :)

Translate