Report: Taxpayer data might be at risk