US Treasury’s OCC Email Hack: A Year-Long Peek-a-Boo with Sensitive Data
The US Treasury’s Office of the Comptroller of the Currency (OCC) disclosed a significant email breach that went undetected for over a year. Hackers accessed 100 employee emails, including sensitive financial data, through a compromised admin account. The breach was confirmed in February 2025, prompting an incident response and collaboration with cybersecurity experts.

Hot Take:
Looks like the US Treasury’s Office of the Comptroller of the Currency (OCC) just learned the hard way that ignoring your email security can leave you more exposed than a cat meme on the internet. Imagine the shock of realizing you’ve been sharing your digital diary with the world’s worst pen pals for over a year! Time to update those spam filters, folks!
Key Points:
- OCC revealed a major email breach that went undetected for over a year, affecting 103 accounts.
- The breach was confirmed on February 12, 2025, following a tip-off from Microsoft’s security team.
- Approximately 150,000 emails, including sensitive financial data, were accessed by hackers.
- The breach has been classified as a major incident, with ongoing investigations to determine its full impact.
- The identity of the hackers remains unknown, with no confirmed links to previous Treasury attacks.
Already a member? Log in here