Confirmé

Oklahoma Tax Commission: unauthorised access to W-2 and 1099 files in OkTAP

In December 2025, the OTC learned of suspicious activity in the OkTAP taxpayer portal; certain W-2 and 1099 files were accessed without authorisation between July 5, 2024 and December 20, 2025, containing names and SSNs.

Dernière mise à jour: 2026-11-09

Ce contenu est affiché en English.

Présentation

The state’s cyber incident listing says the incident was identified on December 19, 2025. No total is given. The first-disclosure date is the earliest public document confirmed (California AG posting); no 2025 public disclosure was found in other state AG lists, HHS or company notices checked.

Chronologie

  1. Survenue
  2. Découverte
  3. Divulgation

Réponse de l’organisation

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Que faire ?

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Sources

  1. Sample consumer notice filed with California AG (Oklahoma Tax Commission)California Department of Justice, Office of the Attorney General · 2026-11-09
  2. California AG data breach report: Oklahoma Tax CommissionCalifornia Department of Justice, Office of the Attorney General · 2026-11-09
  3. Oklahoma OMES: Dec. 19, 2025 incident – Oklahoma Tax CommissionOklahoma Office of Management and Enterprise Services · 2026-11-09
  4. Vermont AG: State of Oklahoma notice to consumersVermont Office of the Attorney General · 2026-11-09

Informations associées

Partager une information

Aucune information publiée

Les informations apparaîtront après vérification ou modération.

Commentaires et réponses

Écrire un commentaire

Sans inscription. Les commentaires sont publiés immédiatement.

Ne publiez pas de noms privés, d’adresses, de mots de passe ou de codes. Le masquage automatique est limité : vérifiez avant l’envoi.

Les champs obligatoires portent un *.

Après l’envoi du texte, vous pouvez masquer les données et joindre des images.

Chargement du contrôle de sécurité. Vous pourrez envoyer une fois la vérification terminée.