OneLogin, an online service that lets users manage logins to sites and apps from a single platform, says it has suffered a security breach. OneLogin says it detected unauthorized access to OneLogin data, including the ability to decrypt encrypted data. The company has not yet responded to a request for comment, but a copy of a message OneLogin reportedly sent to its customers about the breach was obtained by Motherboard. Gartner Inc. financial fraud analyst Avivah Litan says cloud-based single sign-on services are the digital equivalent of putting all of its eggs in one basket.”]
Source: https://krebsonsecurity.com/2017/06/onelogin-breach-exposed-ability-to-decrypt-data/