Hackers spied on the emails of 103 employees of the US Office of the Comptroller of the Currency (OCC) for over a year before being discovered in February, as reported by Bloomberg.
The attackers gained access to the OCC in May 2023 by compromising an administrator's email account. The breach went undetected until February 11, 2025, when Microsoft alerted the OCC to suspicious network activity. In that period, the hackers were able to intercept roughly 150,000 emails.
This content is available to paid Members of Starling Insights.
If you are a Member of Starling Insights, you can sign in below to access this item.
If you are not a member, please consider joining Starling Insights to support our work and get access to our entire platform. Enjoy hundreds of articles and related content from past editions of the Compendium, special video and print reports, as well as Starling's observations and comments on current issues in culture & conduct risk management.
Join The Discussion
Sign in and be the first to comment.