Oklahoma Tax Commission Discloses 17-Month Data Breach Impacting Taxpayers Nationwide
The Oklahoma Tax Commission (OTC) recently notified victims of a prolonged data breach that exposed sensitive taxpayer information between July 6, 2024, and December 20, 2025. The breach, discovered in December 2025, involved unauthorized access to W-2 and 1099 files stored in the Oklahoma Taxpayer Access Point (OkTAP), the state’s public tax filing portal.
Letters sent to affected individuals in late March confirmed that names and Social Security numbers were compromised. While the OTC has not disclosed the total number of victims, the breach included at least 500 California residents, prompting a mandatory notification to the California Attorney General. The agency has not identified the attackers, who could range from individual hackers to state-sponsored groups.
In response, the OTC has enhanced security measures in the OkTAP system and is collaborating with the IRS to monitor fraudulent tax filings. Affected individuals are being offered 12 months of free credit monitoring and fraud assistance through TransUnion.
The OTC has declined to provide further details, including the total number of victims, whether business filers were affected, or the specific cause of the breach. This incident follows previous cybersecurity failures in Oklahoma, including a 2017 breach of a state job-seeking website and a 2019 exposure of sensitive data on an unsecured server run by the Oklahoma Department of Securities. In 2023, the Oklahoma Veterans Commission also reported a vulnerability involving veterans’ personal data stored on an external server.
Oklahoma Tax Commission cybersecurity rating report: https://www.rankiteo.com/company/oklahoma-tax-commission
"id": "OKL1775169528",
"linkid": "oklahoma-tax-commission",
"type": "Breach",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Taxpayers nationwide, at least '
'500 California residents',
'industry': 'Public Sector / Taxation',
'location': 'Oklahoma, USA',
'name': 'Oklahoma Tax Commission',
'type': 'Government Agency'}],
'customer_advisories': '12 months of free credit monitoring and fraud '
'assistance through TransUnion',
'data_breach': {'file_types_exposed': ['W-2', '1099'],
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['W-2 files',
'1099 files',
'Social Security numbers',
'Names']},
'date_detected': '2025-12-01',
'date_publicly_disclosed': '2026-03-01',
'description': 'The Oklahoma Tax Commission (OTC) recently notified victims '
'of a prolonged data breach that exposed sensitive taxpayer '
'information between July 6, 2024, and December 20, 2025. The '
'breach involved unauthorized access to W-2 and 1099 files '
'stored in the Oklahoma Taxpayer Access Point (OkTAP), the '
'state’s public tax filing portal. Names and Social Security '
'numbers were compromised.',
'impact': {'brand_reputation_impact': 'Yes',
'data_compromised': 'Names, Social Security numbers, W-2 and 1099 '
'files',
'identity_theft_risk': 'Yes',
'systems_affected': 'Oklahoma Taxpayer Access Point (OkTAP)'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Oklahoma Tax Commission Notification'}],
'regulatory_compliance': {'regulatory_notifications': 'California Attorney '
'General'},
'response': {'communication_strategy': 'Letters sent to affected individuals',
'containment_measures': 'Enhanced security measures in OkTAP '
'system',
'enhanced_monitoring': 'Collaboration with IRS to monitor '
'fraudulent tax filings',
'third_party_assistance': 'TransUnion (credit monitoring and '
'fraud assistance)'},
'title': 'Oklahoma Tax Commission Discloses 17-Month Data Breach Impacting '
'Taxpayers Nationwide',
'type': 'Data Breach'}