In March 2026, the State of Oklahoma disclosed a data breach involving unauthorized access to W-2 and 1099 files within its OkTAP system. The incident was discovered by December 19, 2025.
The breach exposed names, Social Security numbers, and tax information from the W-2 and 1099 files. While the exact number of affected individuals has not been fully disclosed, at least 14 Maine residents were impacted, and one report suggests the incident involved under 1,000 records. At least 500 individuals were affected to trigger the Oklahoma AG notification law. The sources did not indicate exposure of medical data or traditional consumer financial account records.
Impacted individuals were notified by mail starting March 27, 2026, and offered credit monitoring and fraud assistance. Details regarding the full scope of the breach and specific affected individuals continue to emerge, as official disclosures often unfold over time.