This is how the US enforces its will worldwide.
The Treasury has a similar way to do that, without the OFAC list. They did it in 2018
https://www.google.com/amp/s/www.forbes.com/sites/francescop...
Back to the OCC, the outcome of the audit would have solidified criminal charges against the bank directors, but then they backed off with the “this is a government operation” excuse. Other reasons they would back off being any other kind of leverage, which small banks do not have.