IRS: Computer breach bigger than first thought; 334K victims

WASHINGTON — A computer breach at the IRS in which thieves stole tax information from thousands of taxpayers is much bigger than the agency originally disclosed.

An additional 220,000 potential victims had information stolen from an IRS website as part of a sophisticated scheme to use stolen identities to claim fraudulent tax refunds, the IRS said Monday. The revelation more than doubles the total number of potential victims, to 334,000.

The breach also started earlier than investigators initially thought. The tax agency first disclosed the breach in May.

The thieves accessed a system called “Get Transcript,” where taxpayers can get tax returns and other filings from previous years. In order to access the information, the thieves cleared a security screen that required knowledge about the taxpayer, including Social Security number, date of birth, tax filing status and street address, the IRS said.

The personal information was presumably stolen from other sources. The IRS believes the thieves were accessing the IRS website to get even more information about the taxpayers, which could help them claim fraudulent tax refunds in the future.

“As it did in May, the IRS is moving aggressively to protect taxpayers whose account information may have been accessed,” the IRS said in a statement. “The IRS will begin mailing letters in the next few days to about 220,000 taxpayers where there were instances of possible or potential access to ‘Get Transcript’ taxpayer account information.”

In all, the thieves used personal information from about 610,000 taxpayers in an effort to access old tax returns. They were successful in getting information from about 334,000 taxpayers.

“The IRS’s failure to protect private and confidential information from cyber-attacks risks further fraud for hardworking taxpayers,” said Sen. Orrin Hatch, R-Utah, chairman of the Senate panel that oversees the IRS. “The agency should act swiftly to alleviate the damage for all those affected.”

The IRS said it is notifying all potential victims and offering free credit monitoring services. The IRS is also offering to enroll potential victims in a program that assigns them special ID numbers that they must use to file their tax returns.

The IRS said Monday that thieves started targeting the website in November. Originally, investigators thought it started in February. The website was shut down in May.

On Monday, the IRS did not identify a potential source of the crime. But in May, officials said IRS investigators believe the identity thieves are part of a sophisticated criminal operation based in Russia.

It wouldn’t be the first time the IRS has been targeted by identity thieves based overseas.

In 2012, the IRS sent a total of 655 tax refunds to a single address in Lithuania, and 343 refunds went to a lone address in Shanghai, according to a report by the agency’s inspector general. The IRS has since added safeguards to prevent similar schemes, but the criminals are innovating as well.

The IRS estimates it paid out $5.8 billion in fraudulent refunds to identity thieves in 2013.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Trader Joe’s customers walk in and out of the store on Monday, Nov. 20, 2023 in Everett, Washington. (Olivia Vanni / The Herald)
New Trader Joe’s opens this week at Everett Mall

It’s a short move from a longtime location, essentially across the street, where parking was often an adventure.

Ian Bramel-Allen enters a guilty plea to second-degree murder during a plea and sentencing hearing on Wednesday, March 6, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
‘Deep remorse’: Man gets 17 years for friend’s fatal stabbing in Edmonds

Ian Bramel-Allen, 44, pleaded guilty Wednesday to second-degree murder for killing Bret Northcutt last year at a WinCo.

Firefighters respond to a small RV and a motorhome fire on Tuesday afternoon in Marysville. (Provided by Snohomish County Fire Distrct 22)
1 injured after RV fire, explosion near Marysville

The cause of the fire in the 11600 block of 81st Avenue NE had not been determined, fire officials said.

Ashton Dedmon appears in court during his sentencing hearing on Tuesday, March 5, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
Everett Navy sailor sentenced to 90 days for fatal hit and run

Ashton Dedmon crashed into Joshua Kollman and drove away. Dedmon, a petty officer on the USS Kidd, reported he had a panic attack.

A kindergarten student works on a computer at Emerson Elementary School on Wednesday, Feb. 28, 2024, in Everett, Washington. (Ryan Berry / The Herald)
‘¡Una erupción!’: Dual language programs expanding to 10 local schools

A new bill aims to support 10 new programs each year statewide. In Snohomish County, most follow a 90-10 model of Spanish and English.

Logo for news use featuring the Tulalip Indian Reservation in Snohomish County, Washington. 220118
Woman drives off cliff, dies on Tulalip Reservation

The woman fell 70 to 80 feet after driving off Priest Point Drive NW on Sunday afternoon.

Everett
Boy, 4, survives fall from Everett fourth-story apartment window

The child was being treated at Seattle Children’s. The city has a limited supply of window stops for low-income residents.

People head out to the water at low tide during an unseasonably warm day on Saturday, March 16, 2024, at Lighthouse Park in Mukilteo, Washington. (Ryan Berry / The Herald)
Everett shatters record high temperature by 11 degrees

On Saturday, it hit 73 degrees, breaking the previous record of 62 set in 2007.

Snohomish County Fire District #4 and Snohomish Regional Fire & Rescue respond to a motor vehicle collision for a car and pole. The driver was pronounced dead at the scene, near Triangle Bait & Tackle in Snohomish. (Snohomish County Sheriff’s Office)
Police: Troopers tried to stop driver before deadly crash in Snohomish

The man, 31, was driving at “a high rate of speed” when he crashed into a traffic light pole and died, investigators said.

Alan Dean, who is accused of the 1993 strangulation murder of 15-year-old Bothell girl Melissa Lee, appears in court during opening statements of his trial on Monday, March 18, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
31 years later, trial opens in Bothell teen’s brutal killing

In April 1993, Melissa Lee’s body was found below Edgewater Creek Bridge. It would take 27 years to arrest Alan Dean in her death.

Logo for news use featuring the municipality of Snohomish in Snohomish County, Washington. 220118
Man dies after crashing into pole in Snohomish

Just before 1 a.m., the driver crashed into a traffic light pole at the intersection of 2nd Street and Maple Avenue.

Bodies of two men recovered after falling into Eagle Falls near Index

Two men fell into the falls and did not resurface Saturday, authorities said. After a recovery effort, two bodies were found.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.