https://www.nextgov.com/cybersecurity/2019/04/irs-outdated-app-security-leaves-taxpayers-risk-identity-theft-watchdog-says/156516/
By Jack Corrigan
Staff Correspondent
Nextgov
April 24, 2019
The IRS is nearly a year behind on rolling out online security measures meant
to prevent identity thieves from improperly accessing taxpayer data, according
to an internal watchdog.
The agency operates a full suite of web applications where the public can pay
taxes, review documents and access numerous tax-related services, but many of
the programs lack the latest electronic authentication controls, the Treasury
Inspector General for Tax Administration said in a recent report.
Identity authentication protocols help guarantee that people logging into the
apps are who they claim to be, and if they’re not strong enough, taxpayers risk
having their information stolen.
“Because these applications collect, process, and store large amounts of
taxpayer data, the IRS has become a target of criminals and identity thieves,”
TIGTA wrote in the report. “Strong electronic authentication controls are
needed to prevent identity thieves from succeeding at impersonating taxpayers
and gaining improper access to tax records.”
[...]
--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_