Techies Warn Self-Filing Taxpayers of Possible Identity Theft Threat

Leading tax preparation software companies Intuit (TurboTax) and H&R Block (TaxCut) may be producing software that puts customer tax data at risk, according to some data security experts. Both TurboTax and TaxCut leave taxpayer data files unencrypted and thus unprotected from hackers, and some people are concerned about the possibility of identity theft.

Security Firm PivX Solutions has issued a warning about the hacker potential. Here's how the tax information is stored: TurboTax stores taxpayer information in files that end in a .tax extension. These files, while not readable by a standard word processing program, can be opened and read by anyone with a TurboTax program. TaxCut stores taxpayer information files in regular text files that can be read by word processing programs, including Wordpad and Notepad.

"An identity thief would have all the information they needed to open a line of credit in a victim's name," said Geoff Shively of PivX Solutions. He expressed concerns about the vulnerability of tax files stored on shared network drives, and he also noted that anyone can sit down at a computer and open a tax data file using the appropriate tax software program without entering a password.

"Our clients know it's their responsibility to protect tax data on their computers," said Tom Linafelt, communications manager at H&R Block.

Intuit's Scott Gulbransen agrees. "We always suggest customers use the standard methods to protect their PCs - not just their TurboTax file - from viruses, hackers, etc."

Intuit has no plans to change security measures in the near future. H&R Block indicated it is considering full encryption of tax files in future versions of TaxCut.

You may like these other stories...

Whenever I speak to accountants about creating a cloud practice, the most common question is, “How do I charge my clients?” Ten years ago, maybe even five years ago, if I would’ve posed this question...
While reputational risk is the No. 1 nonfinancial concern among corporate directors, cybersecurity/IT risk is gaining steam. In fact, both private companies and organizations with more than $1 billion in revenue felt they...
Accountants who specialize in forensic and valuation services point to electronic data analysis, or big data, as the most pressing issue they’ll face in the coming months, according to results of a new survey released...

Upcoming CPE Webinars

Jul 31
In this session Excel expert David Ringstrom helps beginners get up to speed in Microsoft Excel. However, even experienced Excel users will learn some new tricks, particularly when David discusses under-utilized aspects of Excel.
Aug 5
This webcast will focus on accounting and disclosure policies for various types of consolidations and business combinations.
Aug 20
In this session we'll review best practices for how to generate interest in your firm’s services.
Aug 21
Meet budgets and client expectations using project management skills geared toward the unique challenges faced by CPAs. Kristen Rampe will share how knowing the keys to structuring and executing a successful project can make the difference between success and repeated failures.