From: IRS.gov

The IRS recently (Feb. 9, 2016, 6:30 p.m. EST) identified and halted an automated attack upon its Electronic Filing PIN application on IRS.gov. Using personal data stolen elsewhere outside the IRS, identity thieves used malware in an attempt to generate E-file PINs for stolen social security numbers. An E-file pin is used in some instances to electronically file a tax return.

No personal taxpayer data was compromised or disclosed by IRS systems. The IRS also is taking immediate steps to notify affected taxpayers by mail that their personal information was used in an attempt to access the IRS application.  The IRS is also protecting their accounts by marking them to protect against tax-related identity theft.

IRS cybersecurity experts are currently assessing the situation, and the IRS is working closely with other agencies and the Treasury Inspector General for Tax Administration. The IRS also is sharing information with its Security Summit state and industry partners.

Based on our review we identified unauthorized attempts involving approximately 464,000 unique SSNs, of which 101,000 SSNs were used to successfully access an E-file PIN. 

The incident, involving an automated bot, occurred last month, and the IRS continues to closely monitor the web application.

This incident is not connected or related to last week’s outage of IRS tax processing systems.  [End of IRS message]

“The persistence of these criminals and the insidiousness of the identity theft problem is costing our society billions of dollars that could be put to far better purposes.  It will take the cooperation of nations from all across the globe to stem this fiscal pandemic, considering the number of cyber-attacks that originate from outside our borders.  It is time for all nations to take this problem seriously and commit the necessary resources to solving it,” said Howard Kass, CPA, CGMA, AEP, Partner. 

LEARN MORE: Click to discover tips, tools, resources and guides, all FREE on our Identity Theft and Fraud page. 

Staying up-to-date on the latest threats to security and your identity can be confusing and time consuming. Our tax team receives notice directly from the IRS, allowing us to communicate to you as quickly as possible. If you have any questions about identity theft, tax return fraud or risk, please contact me directly at hkass@zinnerco.com or any of our professionals at 216-831-0733.