Hackers accessed 150,000 emails from a government agency

The United States Treasury Department’s Office of the Comptroller of the Currency (OCC) has recently discovered an email system breach, describing it as a “major information security incident.” The OCC supervises, regulates, and charters all national banks in addition to supervising federal agencies of foreign banks. 

This breach was discovered due to internal and external reviews of OCC emails and email attachments exposed to unauthorized access. On February 11, 2025, the agency discovered abnormal interactions between a system administrative account and OCC user mailboxes. The following day, it was confirmed the activity was unauthorized. The organization enacted incident response protocols and reported the event to the Cybersecurity and Infrastructure Security Agency (CISA).