- The IRS and Security Summit partners concluded a five-week data-security awareness series for tax professionals.
- The campaign covers malicious client inquiries, stolen professional credentials and warning signs of a breach.
- IRS planning resources, protective tools and breach-reporting contacts are included in the reminder.
Security campaign closes with a reminder
Tax professionals received another warning about protecting client records as the IRS and its Security Summit partners concluded a five-week awareness campaign. The final installment, announced on Sept. 16, 2026, brought together resources for recognizing attacks and responding to stolen information.
The partnership dates to 2015 and includes the IRS, state tax agencies, tax professionals and industry participants. Its work addresses identity theft and fraud affecting the tax system.
Watch for requests that disguise an attack
One scheme begins with someone posing as a prospective client. Links or attachments presented as tax documents can carry malicious software. Other messages seek professional identification numbers, including EFIN, PTIN and CAF credentials.
The campaign also describes IRS impersonation across telephone and messaging channels, alongside misleading tax claims spread through social media. Unusual computer behavior, unexpected system lockouts and rejected electronic returns are among the warning signs the IRS identifies.
Planning and protective tools
Publication 5708 gives practitioners a template for a written information security plan. The agency also highlights six basic safeguards: antivirus protection, firewalls, backups, drive encryption, multifactor authentication and virtual private networks.
Clients can use the Identity Protection PIN program to obtain a six-digit code intended to guard against another person filing with their Social Security number.
Reporting a suspected breach
The IRS advises practitioners to notify a local Stakeholder Liaison and the relevant state tax agency after a breach. The Federation of Tax Administrators provides a breach-reporting webpage for the state notification.
Affected clients should also be informed. The release identifies an Identity Protection PIN and, when appropriate, Form 14039 as possible protective responses.
Readers whose immediate concern is an existing tax balance can contact Republic Tax Relief about its private tax-resolution services. The firm advertises a free, no-obligation initial consultation. Ask about the scope and fees for further assistance and whether help communicating with the IRS is available. This service offer is separate from the data-protection and breach-reporting measures described in the IRS announcement.
Announcement covered: Sep 16, 2026.
General information only, not individual tax, legal, or financial advice. Rules, deadlines, and eligibility depend on your circumstances. Check current official guidance or consult a qualified professional.
Request a correction →
