Password manager and single sign-on provider OneLogin has been hacked, the companion has confirmed.In a brief blog post, the company's chief security officer Alvaro Hoyos said that it had detected unauthorized access to OneLogin data in our The blog post had no further information or technical details about the incident -- though, the carry omitted that hackers had stolen sensitive customer data, which was only cursorily mentioned in an email to customers, seen by ZDNet.OneLogin believes that all customers served by our US data midpoint are affected and customer data was potentially compromised, the email read.Hackers have the ability to decrypt encrypted data, says a sustenance page, accessible only to OneLogin customers (a copy of the carry was published online).The companionship has advised customers to alteration their passwords, render new API keys for their services, and create new OAuth tokens -- used for logging into accounts -- as well as to create new security certificates. The companion said that information stored in its secure Notes feature, used by IT administrators to store sensitive network passwords, can be decrypted.But questions remain over how the hackers had access to data that could be decrypted in the first place.