2026 Oklahoma Tax Commission — OkTAP W-2/1099 files (Jul 2024–Dec 2025; disclosed Mar–Apr 2026)
Data compromised
Names, Social Security numbers, and tax form content in accessed W-2/1099 files per disclosures
Technical writeup
The Oklahoma Tax Commission (OTC) disclosed unauthorized access to certain W-2 and 1099 files within the Oklahoma Taxpayer Access Point (OkTAP), its public-facing tax filing portal. Public reporting summarized a window from approximately July 6, 2024 through December 20, 2025; the agency detected suspicious activity in December 2025 and investigated with third-party specialists. Consumer letters described names and Social Security numbers in affected files. OTC did not publicly release a full victim count in early press coverage but notified individuals (including out-of-state filers; California regulatory thresholds were cited in journalism). The agency described cooperation with the IRS, credit monitoring offers, and hardening of OkTAP.
Root cause
Unauthorized access to tax filing system files (detailed intrusion method not fully public)