The hacker may use the stolen information to target ‘Okta customers via phishing or social engineering attacks,’ the firm said.