The IRS recently released a statement regarding emerging scams that are cropping up this tax season.
Besides phone-based scams targeting individuals, thieves are also stealing client data from tax accountants and using it to file fraudulent tax returns; they use the individual's bank account information for the deposit, then utilize various techniques to access the accounts and claim the funds.
If they haven't already, tax preparers and businesses should ensure that they have adequate security to protect their clients' tax and financial information from cyber-attacks. This may include an annual review of the security of workstation and server computer systems as well as any cloud service providers (Microsoft Office 365, Google Apps Suite, and others), internal policies and procedures (password policies, acceptable use policies), software application security (remote access software, anti-malware, server operating system updates) and employee training programs (resistance to phishing emails, scams and malware).
If you or your clients have been the victim of these sorts of attacks, there are steps to consider taking to protect yourself.
Contact an attorney that has experience in assisting companies that have been the victim of a cyber-attack. The attorney can help you navigate any of the IRS' recommended steps (described below), and engage outside experts under attorney-client privilege.
- Contact the IRS, FBI and local police right away.
- Report the data theft to state agencies (where they prepare state tax returns).
- Contact and engage a forensic computer expert to determine the cause and scope of the theft—and prevent it from happening again.
- Inform your insurance company and see if your policy covers expenses related to the data loss.
- Send letters to clients whose information may have been breached, and notify state attorneys general as required under applicable data breach notification laws. (The FTC also provides guidance for businesses in this situation.)
- Notify credit reporting agencies.
- Consider obtaining credit monitoring and identity restoration services for your clients.
- Contact relevant software and client portal providers to reset passwords and prevent the compromised accounts from being accessed by an attacker.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
