H&R Block Online temp'ly shuts down, Tax Returns mixed up

greenspun.com : LUSENET : Grassroots Information Coordination Center (GICC) : One Thread

(Ouch!)

Tue Feb 15 22:30:06 2000 ET

CP Business News

H&R Block shuts down U.S. online tax filing to probe possible mixup

KANSAS CITY, Mo. (AP) -- H&R Block, the world's largest tax preparer, has shut down its online filing system in the U.S. after discovering that some people's financial information may have been mixed with others.

H&R Block identified fewer than 50 people affected among more than 300,000 tax returns, but expects the program to remain shut down until the weekend while it makes sure no other people are affected, said spokeswoman Linda McDougal.

The company is continuing to audit returns, and will not restore the program until it is sure that returns are accurate, McDougal said. "We've got what we think is a very rare circumstance and confined to our internal system," she said.

H&R Block said Feb. 3 it expected to process about 650,000 U.S. returns over the Internet site this tax season.

Canoe Money, Reuters News Ticker

http://www.canoe.ca/BizTicker/CANOE-wire.HR-Block-Internet.html

-- Lee Maloney (leemaloney@hotmail.com), February 15, 2000

Answers

UPDATE: Twice in the last two weeks, H&R Block has been taken down because of software glitches. So much for online security!

February 15, 2000

Breach exposes H&R Block customers' tax records

Filed at 10:10 p.m. EST

By Courtney Macavinta, CNet News

H&R Block's online tax filing service exposed some customers' sensitive financial records to other customers last weekend, prompting the company to shut down the system yesterday afternoon, CNET News.com has learned.

The company's Web-based tax preparation service, which is the premier sponsor of Yahoo's Tax Center, experienced a technical glitch that accidentally switched some tax filers' records, H&R Block confirmed today. As a result, when some registered users signed on to the service to work on their tax returns, they instead received someone else's filing--including a social security number, home address, annual income and other highly sensitive information.

"What we discovered was that some of our clients' data was appearing in other clients' data files," said Linda McDougall, vice president of communications for H&R Block. "We're keeping it down until we're convinced that the problem has been corrected."

McDougall emphasized that the problem only affected the Web-based preparation and filing of returns. Taxes processed with H&R Block's preparation software or at one of the company's offices were not exposed, she said.

The software glitch revealed the confidential records of at least 50 people, although the full extent of the problem will not be known until the company completes an internal audit, McDougall said. She added that at least 10 customers have contacted the company about the problem.

"Once we determined this, we took our system offline immediately and we began an audit of our entire customer database," McDougall said.

"We're confident that it wasn't due to a hacker--we feel that it was a software problem within our system," she added. "No return has been filed to the Internal Revenue Service that contains inaccurate data."

This is the second time in two weeks that H&R Block's $9.95 "Do-it- yourself" Net filing service--which more than 300,000 people have used so far this year--has suffered a technical problem and had to be shut down. H&R Block expects to handle more than 650,000 returns via the Net this year.

The Net has experienced several security concerns in recent months. For example, RealNames, a company that substitutes complicated Web addresses with simple keywords, warned its users last week that its customer database had been hacked, and that user credit card numbers and passwords may have been accessed.

The H&R Block privacy breach was no doubt startling to some users who chose 40-year-old company over other online services, such as Intuit's TurboTax software. User anxiety was intensified because it occurred on the weekend, making it difficult to locate an H&R Block employee who could address the problem.

Joshua Kasteler of the San Francisco Bay area said he was tackling his EZ 1040 on Sunday when the H&R Block system started to act sluggish. Kasteler logged off, and when he signed on to the password- protected site an hour later, he was given access to the records of another H&R Block customer.

"Instead of my information, it was a gentleman from Texas who worked for Advanced Micro Devices," Kasteler said, noting that the forms also listed the other person's phone number, address, social security number and annual income. "I assumed that someone else has my information, too, because this guy's information fell into my lap. I had this guy's life."

Kasteler said he emailed and called H&R Block but still had not heard back from the firm as of late today.

Kasteler called the man whose information he accessed--James Keech, a maintenance technician who also had trouble with the H&R Block site and had been unable to process his return since Thursday.

"When (Kasteler) called, I was freaking," Keech said. "I was like, 'If he's got it, how many other people have my file and aren't being honest and letting me know.' "

Keech said he called H&R Block and was told that there had been a security problem. He has asked that his data be deleted from the system.

"I'll probably go to a regular tax filing office now," he said. "It would have been easier to fill it out on paper."

The 1040 EZ is a simplified IRS form that does not include information such as itemized deductions, capital gains or rental income.

H&R Block's privacy policy states that "information contained in your tax return will be treated with extreme care and confidence...we will never disclose any tax return information without your consent." Like many Web sites, however, the policy doesn't address information that is accidentally disclosed without permission.

With the growth of the Net, consumer advocates have been pushing for umbrella data-protection laws to safeguard U.S. computer users, who may be giving up more information in the digital age that makes them vulnerable to fraud and privacy breaches.

The Clinton administration and Congress, however, have been reluctant to pass new privacy laws that impose stricter penalties for firms that don't secure the data they collect. Instead, the U.S. government has favored industry-developed guidelines.

CNET

Source: The New York Times, Technology section

http://www .nytimes.com/cnet/CNET_0_4_1550948_00.html



-- Lee Maloney (leemaloney@hotmail.com), February 17, 2000.


Another UPDATE:

February 16, 2000

H&R Block Seeks To Reassure Public

Filed at 4:41 p.m. EST By The Associated Press

WASHINGTON (AP) -- ~snip~ .... H&R Block officials say the problem was caused as software was updated, and that computer hackers or other outside sources were not to blame.

~snip~

Intuit Inc., maker of TurboTax software, coincidentally announced Wednesday that more than 875,000 filers had already begun their federal returns through its Internet-based service, compared with only 240,000 for all of last year.

``As the numbers demonstrate, we enable consumers to file online with confidence,'' said Bob Meighan, vice president of Intuit Consumer Tax Group.

To ease the sting while its online system is down, H&R Block is offering free Internet downloads of its TaxCut preparation software for personal computers. That's available at www.hrblock.com, a spokeswoman said.

Source: The New York Times, Technology section

http://www.nytimes.com/aponline/f/AP-HR-Block- Internet.html

-- Lee Maloney (leemaloney@hotmail.com), February 17, 2000.


No sooner did I post the above article, then I received two emails from a friend :

"I talked to my sister-in-law this morning who works for H&R Block. She said that they haven't had any problems filing electronically to the IRS and she submitted her own this past weekend. However, for several days last week the IRS would not accept electronic filing because THEIR computers were down. Now this makes sense. The problem is not with H&R Block...the problem is with the IRS (just as Gary North said). I asked her to keep an eye on it and let me know what she comes up with as she asks around."

"I asked her again about the IRS down time on their computer and she said they were down two days OVER A WEEKEND. They can usually submit tax returns over a weekend but not that time. The IRS had problems of some sort."

-- Lee Maloney (leemaloney@hotmail.com), February 17, 2000.


(UPI) .... A company spokesman told Interactive Week that the problem had nothing to do with H&R Block's "Tax Cut" software program, and that the customers affected did not have erroneous information sent to the Internal Revenue Service. ....

(Compiled by Joe Warminsky in Washington.)

Virtual New York - On the Net

http://www.vny.com/cf/news/upidetail.cfm?QID=65061

-- Lee Maloney (leemaloney@hotmail.com), February 18, 2000.


Moderation questions? read the FAQ