Cloudflare told CNN Business on Wednesday that it uses Verkada systems to monitor office access points and passageways, and that Verkada had reached out to inform the company that its cameras may have been compromised. Cloudflare said none of its own customers’ data had been affected by the Verkada breach.
“The cameras were in offices that have been officially closed for nearly a year,” the company said.
Okta, the identity management company and also a Verkada customer, told CNN Business that 5 Verkada cameras monitoring Okta’s entrances had been compromised. The incident did not disrupt Okta’s own customer-facing services, communications director Lindsay Life said.
“After further investigation, Okta determined that five Verkada cameras had been compromised,” Life told CNN Business. “These cameras were isolated and separate from Okta’s production and corporate networks. Okta does not use facial recognition technology and there is no evidence that live streams were viewed during the limited access that took place.”
Verkada told CNN Business it disabled “all internal administrator accounts” to lock down the breach.
“Our internal security team and our external security company are investigating the scale and scope of this problem,” Verkada said, “and we have notified the police.”
According to Bloomberg, an international group of hackers were able to access Verkada using administrative credentials found on the public internet.
Verkada told CNN Business that it has contacted customers and provided them with a helpline.