Breach Notification , Breach Response , Data Breach
Inspector General Identifies 724,000 Taxpayer Accounts Being Exposed
The Internal Revenue Service, for the second time since August, has revised upward the number of accounts victimized in its Get Transcript breach, with the tax agency saying the personal information from as many as 724,000 taxpayers accounts may have been stolen.
See Also: Unlocking Software Innovation with Secure Data as a Service
Following a nine-month review, the Treasury Department's inspector general for tax administration discovered an additional 390,000 taxpayer accounts possibly exploited by the attack on the Get Transcript system, the IRS said Friday.
When first discovered in May, the IRS identified 114,000 breached accounts (see IRS: 100,000 Taxpayer Accounts Breached ). In August, the IRS upped that number to 334,000 accounts (see IRS: Hack Much Wider Than First Thought ).
In addition the IRS says hackers unsuccessfully targeted an additional 295,000 taxpayer transcripts, bring that number to 570,000.
The IRS says it will begin on Monday notifying new victims, including those whose accounts were attacked but not breached. "The IRS is committed to protecting taxpayers on multiple fronts against tax-related identity theft, and these mailings are part of that effort," IRS Commissioner John Koskinen said in a statement. "We are moving quickly to help these taxpayers."
The IRS says IG investigators identified suspicious email addresses that made multiple attempts to access accounts. The IRS says it's possible that some of those identified may be family members, tax return preparers or financial institutions using a single email address to attempt to access more than one account. In an abundance of caution, the IRS says it will notify all affected taxpayers.
The IRS launched Get Transcript in January 2014 to allow taxpayers to view and download their tax transcripts or have them mailed to their addresses. Since discovering the breach, the IRS suspended Get Transcript's online viewing and downloading features.