H&R Block Mailed Free Software with Recipient’s Social Security Number on Label

H&R Block acknowledged last week that it had mailed unsolicited packages, containing their TaxCut software, to former customers early in December and that some of these packages had the former client’s social security number (SSN) embedded in the source code on the mailing label, CIO-today.com news reports. This kind of software mailing is a common marketing practice in many industries, according to WTVQ.com in Lexington, Kentucky.

H&R Block’s spokesperson, Denise Sposato said in a statement quoted by WTVQ, “We believe the exposure of a recipient’s social security number embedded within 47 numbers and characters was limited to the recipient alone.”

Tracy Lowman, who received the free software in the mail, described the label to WTVQ.com saying, “Oh the first letter I come to is HRB. The next is clearly a string of numbers that’s the same as a social security number with an underscore, and then a year.”

The error affected 3 percent of a mailing, Sposato said. She did not reveal the total size of the mailing, or the number of people affected, CIO-today reports. Sposato did say that the “breach is completely contrary to our established procedure. We do not buy Social Security numbers as part of the mailing lists that we purchase, and we do not sell Social Security numbers.”

H&R Block has sent out mailings, by first-class mail, to all of the people affected by the security breach, advising them to check their credit reports for the nest year, and recommending the use of three credit agencies that will not charge them for the service, CIO-today.com says.

Social Security numbers are used by nearly every government agency to identify taxpayers and are used as “personal ID numbers” by state governments, employers and businesses. The difficulty in changing an individual number makes them a prime target for identity thieves, according to Martin Bosworth, writing for ConsumerAffairs.com.

In December, the Internal Revenue Service (IRS) published proposed guidance on the disclosure or use of tax return information by tax return preparers, on their web site, IRS.gov. “A key principle underlying the proposed guidance is that tax return preparers may not disclose or use tax return information for purposes other than tax return preparation without the knowing, informed and voluntary consent of the taxpayers,” the proposed guidance says.

To minimize identity theft, the IRS recommends in Minimizing Identity Theft that individuals protect their SSN’s by not carrying them, and by not giving the number out unless absolutely necessary. “Ask why the SSN is needed and if other types of identifiers can be used.” Make sure your employer is protecting your number, and if you do not do your own tax return, “be careful in choosing you tax preparer – as careful as you would be in choosing a doctor or a lawyer.”

You may like these other stories...

Here's a CPA who truly walks the walk. On March 15, Frank Ryan, CPA, departed San Diego, California, with plans to be in Ocean City, Maryland, by July 2 to teach a course at the Maryland Association of CPAs’ (MACPA...
When Theodore J. Flynn first joined the Massachusetts Society of CPAs (MSCPA) in 1970, it was a different world and a different profession.  The "Big Eight" were still headquartered in Boston. Vietnam War...
Accountant Rickey Charles Goodrich had it a little too good. Many bean counters would kill to serve as financial guru to the likes of Pearl Jam. Goodrich was hired in 2005, and the following year, he became the CFO of Curtis...

Already a member? log in here.

Upcoming CPE Webinars

Sep 24
In this jam-packed presentation Excel expert David Ringstrom, CPA will give you a crash-course in creating spreadsheet-based dashboards. A dashboard condenses large amounts of data into a compact space, yet enables the end user to easily drill down into details when warranted.
Sep 30
This webcast will include discussions of important issues in SSARS No. 19 and the current status of proposed changes by the Accounting and Review Services Committee in these statements.
Oct 21
Kristen Rampe will share how to speak and write more effectively by understanding your own and your audience's communication style.
Oct 23
Amber Setter will show the value of leadership assessments as tools for individual and organizational leadership development initiatives.