The IRS believes that a major cyber breach that allowed criminals to steal the tax returns of more than 100,000 people originated in Russia, two sources briefed on the data theft tell CNN.
On Tuesday, the Internal Revenue Service announced that organized crime syndicates used personal data obtained elsewhere to access tax information, which they then used to file $50 million in fraudulent tax refunds.
The IRS said the agency’s Criminal Investigation Unit and the Treasury Inspector General for Tax Administration are investigating the origins of the breach. The agency also alerted the Homeland Security Department of the breach, a DHS official confirmed. On Thursday, the FBI announced it had also opened an investigation into the incident.
An IRS spokeswoman said the agency does not discuss ongoing investigations.
The news that the IRS data breach is believed to have originated in Russia comes on the heels of the disclosure that Russian hackers had infiltrated both the White House and State Department computer systems.
The security of taxpayer data has been an IRS problem for years. In an October report, the IRS’ independent watchdog called it the agency’s number one problem.
“Computer security has been problematic for the IRS since 1997,” according to the report.
And the new breach has lawmakers on Capitol Hill demanding answers.
Calling it the first step of many, Republican Senate Finance Committee Chairman Orrin Hatch announced Wednesday that he plans to haul IRS Commissioner John Koskinen before his committee next week to explain what happened and who is to blame.
“When the federal government fails to protect private and confidential taxpayer information, Congress must act,” Hatch said.
Between February and May, criminals tried to access the tax accounts of 200,000 people, succeeding in about half the attempts, the IRS said. The agency said it plans to notify all 200,000 people to tell them that third parties appear to have access to their Social Security numbers and other personal information.
The roughly 100,000 taxpayers whose tax information was accessed will be offered free credit monitoring, the agency said.
