Hackers use college student loans tool to steal $30 million

Up to 100,000 people are exposed to identity theft after thieves exploited an IRS tool meant to help students apply for college loans.

A financial aid tool for college students helped hackers steal up to $30 million from the US government.

Nearly 100,000 people are at risk for identity theft after hackers breached the IRS’s Data Retrieval Tool, which parents use to transfer financial information for their kids using the Free Application for Federal Student Aid. In 2015, 17 million students used FAFSA to file for financial aid.

Fraudulent tax returns have become a growing issue for the IRS, as hackers find more sophisticated measures to steal financial documents online. The agency lost $5.8 billion in 2013 alone from sending tax refunds to thieves filing in other people’s names. These schemes have targeted schools, hospitals and restaurants, and college students are the latest victims.

IRS Commissioner John Koskinen testified to the Senate Finance Committee on Thursday, revealing thousands of people could be hit by identity theft from the breach. The agency delayed refunds from going out to 52,000 taxpayers until they can verify they’re real requests.

“It was clear that some of that activity was legitimate students, some of it was criminals,” Koskinen said. “So we shut the system down.”

The tool, which allowed applicants to automatically upload their tax information, also allowed hackers to pose as 8,000 college students in tax refund requests. They would start the financial aid process like a normal student, and then use the IRS tool to automatically populate tax information for the student and parents.

Using that stolen tax information, identity thieves filed fraudulent tax returns, stealing $30 million from the IRS. Up to 14,000 other phony tax refunds were blocked from the IRS.

The Department of Education and the IRS disabled the tool in March, during a critical time when students are applying for loans, and said it wouldn’t return online until the fall. The IRS first learned about the breach in September 2016, but delayed shutting down the tool then because millions of students depend on it.

“As soon as there was any indication of criminal activity, we would have to take that application down,” Koskinen said. “That occurred, as we monitored, in through the early part of Feburary.”

Students can still fill out their application manually without the tool, but the process takes a longer time. The IRS has notified 100,000 people that their information is at risk.

Advertisements

2 thoughts on “Hackers use college student loans tool to steal $30 million”

  1. You really make it seem so easy together with your presentation but I to find this matter to be really something which I think I would never understand. It seems too complicated and extremely large for me. I am looking ahead in your subsequent post, I will attempt to get the dangle of it!

  2. You actually make it appear so easy along with your presentation but I in finding this matter to be actually one thing which I feel I might never understand. It kind of feels too complex and very wide for me. I’m taking a look ahead for your next publish, I’ll attempt to get the hold of it!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Advertisements
Advertisements
%d bloggers like this: