Okta, Inc. 10-Q

Item 1. Legal Proceedings On May 20, 2022, a purported shareholder filed a putative class action lawsuit in the United States District Court for the Northern District of California against the Company and certain of its executive officers, captioned In re Okta, Inc. Securities Litigation , No. 3:22-cv-02990. The lawsuit asserts claims under Sections 10(b) and 20(a) of the Securities Exchange Act of 1934, alleging that the defendants made false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches, and the Company’s integration of Auth0, Inc. (“Auth0”). The lawsuit seeks an order certifying the lawsuit as a class action and unspecified damages. The defendants moved to dismiss the amended complaint. On March 31, 2023, the court issued an order granting in part and denying in part the motion to dismiss. The court dismissed in full the claims based on plaintiff’s allegations related to the Company’s cybersecurity controls and vulnerability to data breaches, and dismissed in part and denied in part the claims based on allegations related to the Auth0 integration. Discovery will proceed with respect to the issues remaining in the case. Additionally, two purported shareholders filed derivative lawsuits on behalf of the Company in the United States District Court for the Northern District of California against certain of its current and former executive officers and directors, captioned O’Dell v. McKinnon et al ., No. 3:22-cv-07480 (filed Nov. 28, 2022), and LR Trust v. McKinnon et al ., No. 3:22-cv-08627 (filed Dec. 13, 2022). The lawsuits allege, among other things, that the defendants breached their fiduciary duties by making false or misleading statements or omissions concerning the Company’s cybersecurity controls, vulnerability to data breaches, and the Company’s integration of Auth0. The lawsuits seek orders permitting the plaintiffs to maintain this action derivatively on behalf of the Company, awarding unspecified damages allegedly sustained by the Company, awarding restitution from the individual defendants, and requiring the Company to make certain reforms to its corporate governance and controls. On February 22, 2023, the court entered a stipulated order consolidating the derivative actions, appointing co-lead counsel for plaintiffs, and staying the consolidated derivative actions during the pendency of the motion to dismiss in the securities class action lawsuit. The consolidated derivative action is captioned In re Okta, Inc. Stockholder Derivative Litigation , No. 3:22-cv-07480. On May 9, 2023, the court entered a stipulated order continuing the stay. On April 14, 2023, another shareholder filed a substantially similar derivative lawsuit in the United States District Court for the District of Delaware against certain of the Company’s current and former executive officers and directors, captioned Buono v. McKinnon et al. , No. 1:23-cv-00413. No parties have been served. The Company intends to defend these lawsuits vigorously. See Note 8 to our condensed consolidated financial statements, “Commitments and Contingencies” for information related to other legal proceedings.