Confirmado

Oklahoma Tax Commission: unauthorised access to W-2 and 1099 files in OkTAP

In December 2025, the OTC learned of suspicious activity in the OkTAP taxpayer portal; certain W-2 and 1099 files were accessed without authorisation between July 5, 2024 and December 20, 2025, containing names and SSNs.

Última actualización: 2026-11-09

Este contenido se muestra en English.

Resumen

The state’s cyber incident listing says the incident was identified on December 19, 2025. No total is given. The first-disclosure date is the earliest public document confirmed (California AG posting); no 2025 public disclosure was found in other state AG lists, HHS or company notices checked.

Cronología

  1. Ocurrencia
  2. Descubrimiento
  3. Divulgación

Respuesta de la organización

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Qué puedes hacer

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Fuentes

  1. Sample consumer notice filed with California AG (Oklahoma Tax Commission)California Department of Justice, Office of the Attorney General · 2026-11-09
  2. California AG data breach report: Oklahoma Tax CommissionCalifornia Department of Justice, Office of the Attorney General · 2026-11-09
  3. Oklahoma OMES: Dec. 19, 2025 incident – Oklahoma Tax CommissionOklahoma Office of Management and Enterprise Services · 2026-11-09
  4. Vermont AG: State of Oklahoma notice to consumersVermont Office of the Attorney General · 2026-11-09

Información relacionada

Compartir información

Aún no hay información publicada

La información aparecerá tras verificar fuentes o moderar los avisos.

Comentarios y respuestas

Escribir un comentario

Sin registro. Los comentarios se publican de inmediato.

No publiques nombres privados, direcciones, contraseñas ni códigos. El enmascarado automático tiene límites: revisa antes de enviar.

Los campos obligatorios llevan *.

Tras enviar el texto, puedes ocultar datos sensibles y adjuntar imágenes.

Cargando la verificación de seguridad. Podrás enviar cuando termine.