The Washington Post

IRS left taxpayer data vulnerable to attack, report says


The Internal Revenue Service failed to demonstrate that it fully addressed security weaknesses in recent years, potentially leaving sensitive taxpayer information vulnerable to attack, according to an auditor’s report.

The Treasury Inspector General for Tax Administration found that the IRS had only partially implemented 42 percent of the corrective plans it checked off as completed in recent years.

“When the right degree of security diligence is not applied to systems, disgruntled insiders or malicious outsiders can exploit security weaknesses and may gain unauthorized access,” Treasury Inspector General J. Russel George said in the report.

(Andrew Harrer/Bloomberg) (Andrew Harrer/Bloomberg)

The review showed that the IRS failed to properly track its progress toward completing many of the fixes auditors had recommended in recent years. The agency closed most of the cases without adequate documentation and did not always uploaded the necessary information into a database that helps ensure compliance.

The inspector general suggested that the IRS should strengthen its management controls and follow its internal requirements for tracking implementation of corrective measures, in addition to providing additional training to employees.

The IRS said in its response to the findings that it issued a new manual this year to help improve its monitoring practices and that the agency would audit completed actions in the future.

Follow Josh Hicks on TwitterFacebook or Google+. Connect by e-mail at  josh.hicks@washpost.comVisit The Federal Eye, The Fed Page and Post Politics for more federal news. E-mail with news tips and other suggestions.

Josh Hicks covers Maryland politics and government. He previously anchored the Post’s Federal Eye blog, focusing on federal accountability and workforce issues.



Success! Check your inbox for details. You might also like:

Please enter a valid email address

See all newsletters

Show Comments
Most Read



Success! Check your inbox for details.

See all newsletters

Your Three. Video curated for you.
Next Story
Josh Hicks · November 21, 2013

To keep reading, please enter your email address.

You’ll also receive from The Washington Post:
  • A free 6-week digital subscription
  • Our daily newsletter in your inbox

Please enter a valid email address

I have read and agree to the Terms of Service and Privacy Policy.

Please indicate agreement.

Thank you.

Check your inbox. We’ve sent an email explaining how to set up an account and activate your free digital subscription.