2
Published signals
currently linked to this company
Company intelligence
Occ cybersecurity incidents and threat signals
occ.gov
This company page brings together public reporting currently associated with Occ. It reflects signals published by Shadow Tier and should not be read as a complete incident history.
Company links
0
Last 28 days
recent published signals
0
Last 90 days
recent published signals
0
High or critical
confidence classifications
June 30, 2026
Latest report
most recent published signal
Company signals
All published signals involving Occ
U.S. Banking Regulator OCC Notifies Congress of Major Email System Security Breach
The Office of the Comptroller of the Currency (OCC) notified Congress on April 8, 2025, of a major information security incident involving unauthorized access to its email system. Hackers gained access to over 100 email accounts and approximately 150,000 emails, including those of senior deputy comptrollers and international banking supervisors, from May 2024 until February 2025. The compromised emails and attachments contained highly sensitive information related to the financial condition of federally regulated financial institutions. The incident was identified on February 11, 2025, and confirmed as unauthorized activity on February 12, 2025.
OCC Email System Breached, Exposing Sensitive Financial Institution Data
The Office of the Comptroller of the Currency (OCC), a US federal agency that regulates national banks, detected unauthorized interactions with its email system on February 11, 2025, through a compromised administrative account. This major incident exposed highly sensitive information related to federally regulated financial institutions' examinations and supervisory processes. The OCC disabled the compromised accounts on February 12, 2025, and initiated an independent third-party forensic investigation.
FAQ
Questions about Occ cybersecurity reporting
What does the Occ page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Occ.
Does every mention of Occ appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.