Zack Whittaker on Twitter: "According to a timeline of the Sitel intrusion compiled by Mandiant (dated March 17), the Lapsus$ hackers accessed a spreadsheet on Sitel’s internal network called “DomAdmins-LastPass.xlsx" early on January 21, around the time Okta was compromised. https://t.co/5q580tMNxT" / Twitter
https://twitter.com/zackwhittaker/status/1508521284908498951