it has more detail on the breach then okta's own statement.