Last month, the U.S. Department of the Treasury announced a new cybersecurity information‑sharing initiative led by its Office of Cybersecurity and Critical Infrastructure Protection (OCCIP). The program is designed to give eligible U.S. digital asset firms access to the same actionable cyber‑threat information Treasury already provides to traditional financial institutions. According to Treasury, the effort responds to a rapidly evolving threat environment and implements a key recommendation from the President’s Working Group on Digital Asset Markets (PWG) report issued under Executive Order 14178.
The announcement marks Treasury’s most direct step to date in extending its critical‑infrastructure protection mission to the digital‑asset sector—an industry Treasury now describes as “an increasingly important part of the U.S. financial sector.”
A New Cybersecurity Information‑Sharing Channel for Digital Asset Firms
Treasury’s press release explains that OCCIP will provide participating digital asset firms with “timely, actionable cybersecurity information” at no cost. The information mirrors what Treasury already shares with banks and other traditional financial institutions.
Treasury officials emphasized several themes:
- Growing systemic importance of digital asset firms. Assistant Secretary for Financial Institutions Luke Pettit stated that the resilience of digital asset firms is now “critical to the health of the broader system.”
- Cybersecurity as a prerequisite for responsible innovation. Counselor to the Secretary for Digital Assets Tyler Williams linked the initiative to the principles of the GENIUS Act, noting that strong cybersecurity and operational resilience are foundational to digital‑asset market development.
- Escalating threat landscape. Deputy Assistant Secretary for Cybersecurity Cory Wilson highlighted the increasing frequency and sophistication of cyberattacks targeting digital‑asset platforms and the need for more robust, real‑time threat information.
Eligible firms may contact OCCIP directly to enroll.
How the Initiative Aligns with the PWG’s Digital‑Asset Recommendations
The April 9 announcement explicitly ties the OCCIP initiative to the PWG’s July 2025 report, Strengthening American Leadership in Digital Financial Technology, issued pursuant to Executive Order 14178.
Several recommendations in the PWG report provide the policy foundation for Treasury’s new program:
- Expand public‑private information sharing to counter illicit finance and cyber threats.
The PWG report calls for Treasury to “encourage greater information sharing between the private and public sectors to more effectively target bad actors operating in the digital asset ecosystem,” emphasizing that such sharing should be used solely for illicit‑finance and national‑security purposes. Treasury’s new initiative operationalizes this recommendation by extending its existing financial‑sector threat‑information channels to digital‑asset firms. - Equip digital‑asset actors to mitigate risk.
The PWG report identifies a need for clearer expectations and more support for digital‑asset firms navigating AML/CFT and cybersecurity risks. It encourages agencies—including Treasury—to provide guidance and tools that help firms understand and meet their obligations. Providing direct access to actionable cyber‑threat intelligence is consistent with that objective. - Promote operational resilience as digital assets integrate into the financial system.
The PWG report frames cybersecurity as essential to responsible innovation and to the stability of U.S. financial markets as digital‑asset activity grows. Treasury’s messaging in the April 9 release echoes this theme, underscoring that digital‑asset firms’ resilience is now a matter of broader financial‑system health.
What This Means for Digital Asset Firms
Although the initiative is voluntary, it signals Treasury’s expectation that digital‑asset firms should begin aligning their cybersecurity posture with the standards long applied to banks and other regulated financial institutions.
- Heightened expectations for threat‑intelligence integration.
Access to Treasury’s cyber‑threat information is only useful if firms have the internal capability to ingest, triage, and act on it. Firms may need to evaluate whether their security operations centers, incident‑response processes, and governance structures can operationalize this information effectively. - A clearer link between cybersecurity and financial‑crime compliance.
The PWG report situates cybersecurity squarely within the broader illicit‑finance risk framework. Treasury’s initiative reinforces that cyber‑risk and AML/CFT risk are increasingly intertwined—particularly for digital‑asset platforms that face both technical and financial‑crime threats. - Early alignment with future regulatory expectations.
While the initiative itself is not a rulemaking, it reflects Treasury’s policy trajectory. As digital‑asset firms become more integrated into the financial system, regulators may expect them to demonstrate cybersecurity maturity comparable to traditional financial institutions. Participation in OCCIP’s program could become a de facto indicator of baseline preparedness.
How This Fits into Treasury’s Broader Digital‑Asset Strategy
The OCCIP initiative is one component of a broader shift in Treasury’s approach to digital‑asset oversight:
- National‑security framing. The PWG report repeatedly emphasizes the need to counter illicit finance and protect U.S. financial stability as digital‑asset markets grow. Treasury’s April 9 announcement continues that framing by positioning cybersecurity as essential to safeguarding consumers and markets.
- Technology‑neutral expectations. The PWG report encourages regulators to adopt technology‑neutral frameworks that apply consistent standards across financial activities, regardless of whether they involve digital assets. Extending existing cybersecurity information‑sharing channels to digital‑asset firms reflects that approach.
- Operationalizing Executive Order 14178. The Executive Order directs agencies to support responsible digital‑asset innovation while protecting national security. Treasury’s initiative is a concrete step toward implementing that mandate.
Treasury frames the initiative as a concrete step toward strengthening operational resilience in the digital‑asset sector and advancing the policy objectives outlined in Executive Order 14178 and the PWG report. Some market participants, however, may assess potential confidentiality, operational, or integration considerations associated with receiving government threat intelligence, as well as whether participation in a voluntary program could carry additional compliance expectations. More broadly, the effectiveness and implementation of expanded public‑private information‑sharing efforts will likely remain an area of industry interest and discussion. It remains to be seen how widely the industry will participate and what practical impact the initiative will have in addressing evolving cyber threats.
Looking Ahead
Treasury’s launch of this cybersecurity information‑sharing initiative is a notable development for digital‑asset firms, signaling that the sector is now firmly within the scope of Treasury’s critical‑infrastructure protection efforts. It also reflects the Administration’s broader strategy: encourage innovation, but pair it with heightened expectations for operational resilience and risk management.
For digital‑asset firms, the message is clear. As the sector becomes more interconnected with the traditional financial system, regulators expect cybersecurity maturity to keep pace. Treasury’s new program offers a pathway to do that—while also previewing the direction of future oversight.
If you would like to remain updated on these issues, please click here to subscribe to Money Laundering Watch. And please click here to find out about Ballard Spahr’s Anti-Money Laundering Team.








