Oklahoma Tax Commission Confirms Data Breach Affecting Taxpayers’ Personal Information The Oklahoma Tax Commission disclosed a data breach involving its online taxpayer portal, which occurred in December. Unauthorized access exposed personal information, though the agency has not revealed how the breach happened or what specific data was compromised. The full scope of the incident remains unclear, as officials have not confirmed the number of affected taxpayers or when additional details may be released. However, the commission has begun notifying impacted individuals via mail, providing information about the breach and recommended next steps. Affected taxpayers are being offered free credit monitoring and identity theft protection services to help mitigate potential risks. The agency has advised recipients of notification letters to review the information carefully and consider enrolling in the provided protections.

Oklahoma Tax Commission Confirms Data Breach Affecting Taxpayer Files The Oklahoma Tax Commission (OTC) recently disclosed a data breach involving unauthorized access to sensitive taxpayer information within its Oklahoma Taxpayer Access Point (OkTAP) system. The incident, detected in December 2025, prompted an immediate investigation with the help of third-party cybersecurity and digital forensics experts. According to notifications sent to affected individuals in late March 2026, the breach involved unauthorized access to W-2 and 1099 tax files between September 18, 2025, and December 20, 2025. While the OTC has not disclosed the total number of impacted individuals, it confirmed that the breach extended beyond state employees. Those affected were offered complimentary credit monitoring and fraud assistance services. The OTC stated that, as of now, there is no evidence that the exposed data has been used for identity theft or fraud. In response to the incident, the agency has implemented additional security measures to prevent future breaches. The delay between discovery (December 2025) and notification (March 2026) was not explained. The OTC reiterated its commitment to safeguarding taxpayer data and expressed regret over the incident. The IRS assisted in identifying the suspicious activity, though further details on the breach’s origin remain undisclosed.

Oklahoma Tax Commission Discloses 17-Month Data Breach Impacting Taxpayers Nationwide The Oklahoma Tax Commission (OTC) recently notified victims of a prolonged data breach that exposed sensitive taxpayer information between July 6, 2024, and December 20, 2025. The breach, discovered in December 2025, involved unauthorized access to W-2 and 1099 files stored in the Oklahoma Taxpayer Access Point (OkTAP), the state’s public tax filing portal. Letters sent to affected individuals in late March confirmed that names and Social Security numbers were compromised. While the OTC has not disclosed the total number of victims, the breach included at least 500 California residents, prompting a mandatory notification to the California Attorney General. The agency has not identified the attackers, who could range from individual hackers to state-sponsored groups. In response, the OTC has enhanced security measures in the OkTAP system and is collaborating with the IRS to monitor fraudulent tax filings. Affected individuals are being offered 12 months of free credit monitoring and fraud assistance through TransUnion. The OTC has declined to provide further details, including the total number of victims, whether business filers were affected, or the specific cause of the breach. This incident follows previous cybersecurity failures in Oklahoma, including a 2017 breach of a state job-seeking website and a 2019 exposure of sensitive data on an unsecured server run by the Oklahoma Department of Securities. In 2023, the Oklahoma Veterans Commission also reported a vulnerability involving veterans’ personal data stored on an external server.