Menu
Identity thieves obtain 100,000 electronic filing PINs from IRS system

Identity thieves obtain 100,000 electronic filing PINs from IRS system

The automated attack attempted to obtain E-file PINS for over 460,000 people using previously stolen personal data

The Internal Revenue Service was the target of an attack that used stolen social security numbers and other taxpayer data to obtain PINs that can be used to file tax returns electronically.

The attack occurred in January and targeted an IRS Web application that taxpayers use to obtain their so-called Electronic Filing (E-file) PINs. The app requires taxpayer information such as name, Social Security number, date of birth and full address.

Attackers attempted to obtain E-file PINs corresponding to 464,000 unique SSNs using an automated bot, and did so successfully for 101,000 SSNs before the IRS blocked it.

The personal taxpayer data used during the attack was not obtained from the IRS, but was stolen elsewhere, the agency said in a statement. The IRS is notifying affected taxpayers via mail and will monitor their accounts to protect them from tax-related identity theft.

While the IRS said that externally-acquired taxpayer data was used, the agency did suffer a security breach last year that allowed attackers to gain information such as Social Security information, date of birth and street address for over 300,000 taxpayers.

That attack involved the IRS' "Get Transcript" application and in that case too, the agency said that attackers were able to pass the app's verification steps using information acquired from an external source.

In recent years there have been many data breaches that gave hackers access to personal information, including SSNs. Last year alone, health insurers Anthem, Premera, CareFirst and Excellus announced large data breaches that affected tens of millions of Americans. Another breach at the U.S. Office of Personnel Management exposed personal information on 21.5 million current and former U.S. government employees.

Given the sheer amount of personal data that's now in the hands of cybercriminals, it's likely that some of them will try to monetize it and one possible method is by filing fraudulent tax returns.


Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Featured

Slideshows

Kiwi channel comes together to kick-off 2017 Reseller News ICT Industry Awards

Kiwi channel comes together to kick-off 2017 Reseller News ICT Industry Awards

The cream of the Kiwi channel came together at the Hilton Hotel in Auckland, to acknowledge and celebrate an esteemed panel of over 80 local judges ahead of the 2017 Reseller News ICT Industry Awards in October.​ Photos by Maria Stefina.

Kiwi channel comes together to kick-off 2017 Reseller News ICT Industry Awards
Tight lines as Hooked on Lenovo catches up at Great Barrier Island

Tight lines as Hooked on Lenovo catches up at Great Barrier Island

​Ingram Micro’s Hooked on Lenovo incentive programme recently rewarded 28 of New Zealand's top performing resellers with a full-on fishing trip at Great Barrier Island for the third year​ in a row.

Tight lines as Hooked on Lenovo catches up at Great Barrier Island
Inside the AWS Summit in Sydney

Inside the AWS Summit in Sydney

As the dust settles on the 2017 AWS Summit in Sydney, ARN looks back an action packed two-day event, covering global keynote presentations, 80 breakout sessions on the latest technology solutions, and channel focused tracks involving local cloud stories and insights.

Inside the AWS Summit in Sydney
Show Comments