Taxation records leaked: what it means and what to do

What this data is

Tax returns, tax identification numbers, income statements, payment summaries, deductions and correspondence with a tax office, often held by accountants, payroll providers and tax software.

The risk on its own

Tax records are among the richest identity documents a person has. They typically include your full name, address, date of birth, tax ID number, employer, income and bank account for refunds. That combination is enough to impersonate you to the tax office and many lenders.

The risk combined with other data

With your email address and phone number, criminals can file fraudulent tax returns, change refund bank accounts or open credit. Income figures help them target you with tailored investment or tax debt scams. Dependants listed on returns may also be exposed to identity fraud.

How criminals use it

• A criminal lodges a tax return in your name and directs the refund to their bank account.
• Your online tax account is taken over and the refund account details are changed.
• A caller claims to be from the tax office, quotes your income and threatens arrest over unpaid tax.
• Your tax ID and income statements are used to apply for loans or rental properties.

What to do now

1. Contact your tax office and report that your tax records were breached, asking about extra account protection.
2. In the US, request an IRS Identity Protection PIN. In Australia, contact the ATO about protecting your tax file number and myGov account.
3. Place a credit freeze or ban on your credit file with the credit bureaus in your country.
4. Change passwords and turn on two-factor authentication for tax software, accountant portals and government tax accounts.
5. Ignore calls or texts threatening arrest over tax debts. Contact the tax office through its official website.
6. Ask your accountant or payroll provider exactly which documents and dependants were exposed.

Frequently asked questions

Can someone file a tax return in my name?

Yes, if they have enough identity and income details. Contact your tax office quickly and ask about extra protection.

Will the tax office call me about arrest?

Tax offices do not threaten immediate arrest or demand gift cards or crypto. Treat these calls as scams.

Should I change my tax file number or tax ID?

Some tax offices may issue a new number in cases of serious misuse, but many do not. Ask your tax office what protections apply.

Breaches that exposed this data

• Bulgarian National Revenue Agency: 2019-07-15, 471K accounts, Email addresses, Names, Phone numbers, Physical addresses, Taxation records

Tools that help

• Email Breach Check
• Phishing Link Checker
• Password Checker

Related guides

• Identity Theft Checklist: What to Do in the First 48 Hours
• Credit Freeze Guide: US, Australia, UK and Canada Steps
• HR and Payroll Data Leak: Protect Your Pay, Tax and ID
• Phishing Red Flags: Spot a Fake Email Before You Click