IRS' Outdated App Security Leaves Taxpayers at Risk of Identity Theft, Watchdog Says

[InfoSec News <alerts () infosecnews org>]

https://www.nextgov.com/cybersecurity/2019/04/irs-outdated-app-security-leaves-taxpayers-risk-identity-theft-watchdog-says/156516/

By Jack Corrigan
Staff Correspondent
Nextgov
April 24, 2019

The IRS is nearly a year behind on rolling out online security measures meant 
to prevent identity thieves from improperly accessing taxpayer data, according 
to an internal watchdog.

The agency operates a full suite of web applications where the public can pay 
taxes, review documents and access numerous tax-related services, but many of 
the programs lack the latest electronic authentication controls, the Treasury 
Inspector General for Tax Administration said in a recent report.

Identity authentication protocols help guarantee that people logging into the 
apps are who they claim to be, and if they’re not strong enough, taxpayers risk 
having their information stolen.

“Because these applications collect, process, and store large amounts of 
taxpayer data, the IRS has become a target of criminals and identity thieves,” 
TIGTA wrote in the report. “Strong electronic authentication controls are 
needed to prevent identity thieves from succeeding at impersonating taxpayers 
and gaining improper access to tax records.”

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_