OCC Releases Letter on Information Security Incident to Supervised Institutions

WASHINGTON—The Office of the Comptroller of the Currency (OCC) today publicly released a letter sent to its supervised institutions regarding unauthorized access to OCC email systems. The OCC provided public notice of the unauthorized access and its designation as a major information security incident on April 8, 2025.

The OCC is committed to taking all actions to remediate the deficiencies that contributed to this incident and to ensure full accountability for any organizational or structural deficiencies that contributed to this incident.

Related Link

• OCC Information Security Incident Letter, dated April 14, 2025 (PDF)