A security breach has allowed criminals to access the tax returns of more than 100,000 people in the United States.
It appears that the criminals used stolen personal data taken from other websites that had been hacked, to pretend to be legitimate users.
The Internal Revenue Service was warned of the potential for unauthorised access to the accounts in March.
The online IRS' Get Transcript app involved in the breach has been shut down and an investigation is underway.
The scam's perpetrators managed to set up fake tax returns and file for tax refunds. The IRS told the New York Times that it had paid nearly $50m (£32.5m) in refunds before it had detected the scheme.
The IRS says more than 200,000 attempts to view past tax returns using stolen information were made from February to mid-May with around half of those being successful.
"We're confident that these are not amateurs," said John Koskinen, the IRS commissioner.
"These actually are organized crime syndicates that everybody in the financial industry is dealing with."
Security experts are concerned that the IRS' system appeared not to use multi-factor identification, for example sending a one-off code to a users' mobile phone for them to tap into the website, so as to verify that the person giving the information has access to the phone number on record.
The cybersecurity blog Krebs on Security warned in March that the IRS' system could be breached when it reported on the case of Michael Kasper, who had tried to file his tax return only to be told that he had already done so.
In that case criminals had set up an account in Mr Kasper's name using his social security number, but with a different email address. They filed a false tax return in order to claim a tax refund and had conned the IRS into paying that "refund" into a bank account that Mr Kasper did not recognise.
"The IRS' process for verifying people … is vulnerable to exploitation by fraudsters because it relies on static identifiers and so-called "knowledge-based authentication" — ie challenge questions that can be easily defeated with information widely available for sale in the cybercrime underground and/or with a small amount of searching online," said the security website, commenting on Mr Kasper's case.
The IRS has sent letters to the taxpayers whose accounts had been compromised, and said it would offer them free credit monitoring.
The authority said its main computer system, which handles tax filings, had not been breached.
- Kohwe was not my brother – George Laing clarifies
- Takoradi missing woman: Neighbours, husband dispute Regional Minister’s claim she faked pregnancy, kidnap
- ‘Vaccines as a tool for immigration control is retrogressive’ – Akufo-Addo
- Provisional census results peg Ghana’s population at 30.8m – Statistical Service
- Final year student of Tweneboa Kodua SHS jumps to his death
- Mahama’s brother exploiting government’s fertiliser scheme when he doesn’t qualify – Agric Minister
- Suspected thief made to weed acres of land as punishment at Bibiani
- There are still more women in Ghana than men – 2021 PHC by GSS
- 10 dogs maul 2-year-old pupil to death in school compound
- 2 arrested for WASSCE fraud
Kunsu Film Village to revive, preserve Ghanaian culture and heritage
Why shouldn’t I be interested in running for president? – Afriyie Akoto
Covid-19: We’re hoping to vaccinate 20 million Ghanaians by end of 2021 – Akufo-Addo
We expect food prices to stabilise by January 2022 – Agric Minister
9 signs you’re too emotionally needy and how to fix it
Police arrest 3, declare Takoradi woman as a suspect in self-kidnapping probe
Takoradi woman was never pregnant, 3 others arrested for alleged conspiracy – Police
GNFS calls for Fire Stations in each district of Ashanti Region
Ejura heralds Yam Festival with unity and peaceful coexistence
Today’s front pages: Thursday, September 23, 2021
Black cinema champion, Melvin Van Peebles has died
Ghana to soon have fertiliser manufacturing plant to produce fertilisers locally
First tranche of $1.5 billion Cocoa Syndicated Loan to hit BoG account by October 2021
Mahama’s brother exploiting government’s fertiliser scheme when he doesn’t qualify – Agric Minister
Aukus pact: France and US seek to mend rift