
“The Internal Revenue Service (IRS) disclosed today that identity thieves abused a feature on the agency’s Web site to pull sensitive data on more than 330,000 potential victims as part of a scheme to file fraudulent tax refund requests. The new figure is far larger than the number of Americans the IRS said were potentially impacted when it first acknowledged the vulnerability in May 2015 — two months after KrebsOnSecurity first raised alarms about the weakness. The IRS’s experience should tell consumers something about the effectiveness of the technology that the IRS, banks and countless other organizations use to screen requests for sensitive information.”
http://krebsonsecurity.com/2015/08/irs-330k-taxpayers-hit-by-get-transcript-scam/
Related posts:
DEA ‘Cold Consent’ Encounters Constitute Federal Stop-and-Frisk
US Treasury denies it is trying to torpedo Bitcoin
Legal Marijuana: China Competing With U.S. Cannabis Companies?
New leak shows feds can access user accounts for Google, Facebook and more
Messaging giant Line catches cryptocurrency fever
Apple’s Fingerprint ID May Mean You Can’t ‘Take the Fifth’
Defiant nuns and monks refuse to give up Kentucky land for gas pipeline
BitPay Opens European Headquarters in Amsterdam
First Open Source Airplane Could Cost Just $15,000
Russia’s Top Cyber Sleuth Foils US Spies, Helps Kremlin Pals
California police use rubber bullets and cherry-picker to remove tree sitters
How New Tax Cuts Are "Fighting for $15"
Romney on drones: ‘Use any and all means necessary to take out’ enemies
Bitcoin ATMs Are Spreading Across the World
Native American Student Denied High School Diploma For Wearing Tribal Feather