OCC EMAIL SYSTEM BREACH DESCRIBED AS ‘STUNNING, SERIOUS'

Summary from the TLDR InfoSec newsletter

On February 11, the OCC, the US's banking regulator, discovered unusual activity between a system admin account and user mailboxes. Unknown attackers had accessed over 150,000 emails since June 2023. Security analyst David Shipley called the intrusion "massively serious," posing a potential threat to national banking infrastructure. The OCC, which regulates all national banks, has hired third-party cybersecurity experts for a full investigation while asserting that its security controls meet or exceed NIST standards.