Saturday, January 25, 2025
HomeData BreachIRS Data Leak - Over 120,000 User Data Leaked

IRS Data Leak – Over 120,000 User Data Leaked

Published on

SIEM as a Service

Follow Us on Google News

It has been discovered that over 120,000 taxpayers‘ confidential information was accidentally leaked by the IRS (Internal Revenue Service). As part of their tax returns, all of these individuals filed a form 990-T.

Unrelated business income is reported through IRS Form 990T to tax-exempt entities like:-

  • Nonprofits (charities)
  • IRA retirement accounts
  • SEP retirement accounts

An individual retirement account is an account that pays income from investments such as real estate and sales that are unrelated to the core purpose of the nonprofit or from sales that are unrelated to that purpose.

Data Exposure

Normally, when a taxpayer submits these forms to the IRS, the IRS is the only organization that is able to see them. Despite this, non-profit organizations must retain their Form 990-T for a period of three years after they are filed.

Recently, the Internal Revenue Service discovered that the bulk download section of the TEOS now allows users to download data in a machine-readable format (XML) for Form 990-T.

Approximately 120,000 taxpayer records were exposed by the data leak, including an array of personal information, such as:-

  • Names
  • Contact information
  • Reported financial income data (Within those IRAs)

Moreover, these are some of the things that were not included in the exposure:-

  • Social Security numbers
  • Full individual income information
  • Other data that could affect a taxpayer’s credit

The mistake was discovered in recent weeks by an IRS employee who works in the research department. The data was removed as a result of a more comprehensive investigation that triggered a broader inquiry.

Furthermore, the IRS will begin notifying affected taxpayers as soon as possible within the coming weeks. 

Due to aging information-technology systems, the IRS has had to deal with challenges for quite some time. Consequently, there have been instances in which private taxpayer information has been disclosed as a result.

Secure Azure AD Conditional Access – Download Free White Paper

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Subaru’s STARLINK Connected Car’s Vulnerability Let Attackers Gain Restricted Access

In a groundbreaking discovery on November 20, 2024, cybersecurity researchers Shubham Shah and a...

Android Kiosk Tablets Vulnerability Let Attackers Control AC & Lights

A security flaw found in Android-based kiosk tablets at luxury hotels has exposed a...

CISA Releases Six ICS Advisories Details Security Issues

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued six Industrial Control Systems (ICS)...

Juniper Routers Exploited via Magic Packet Vulnerability to Deploy Custom Backdoor

A sophisticated cyber campaign dubbed "J-magic" has been discovered targeting enterprise-grade Juniper routers with...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

BASHE Ransomware Allegedly Leaked ICICI Bank Customers Data

A major cyber threat looms over Indian financial giant ICICI Bank as the notorious...

Threat Actor IntelBroker Allegedly Claiming Breach of Hewlett Packard Enterprise Data

A threat actor known as IntelBroker has taken to a prominent dark web forum...

Massive NBI Data Breach Exposes Millions of Users Records Online

The National Bureau of Investigation (NBI), the Philippines' top investigative agency, has reportedly been...