FYI.

This story is over 5 years old.

Tech

The IRS Vastly Underestimated How Many Tax Forms Hackers Accessed

An additional 390,000 taxpayers were affected.

The cyberattack that the Internal Revenue Service fell victim to in May is much bigger than the service originally projected. At least twice as big, to be a little more exact.

On May 26, the IRS reported that hackers had gained access to some 100,000 user accounts that were registered online on an IRS website. The agency told The Wall Street Journal that an additional 390,000 additional taxpayers were affected and 220,000 prior-year tax return documents may have been accessed. The hackers would then use these documents to file fraudulent tax returns.

The forms were accessed through the the service's Get Transcript site, which allows taxpayers to get online access to previous years' tax return documents. The hackers were able to cobble together some sensitive personal information for this—taxpayers need to input their Social Security number, street address and date of birth to access their documents.

Just a few thousand of these accounts were apparently subject to fraudulent tax returns. But more worrying is the info hackers have on you that could totally be leveraged for far more than just taxes.