United States: IRS Urges Cybersecurity Action for Tax Data Protection

On 2 October 2026, the Internal Revenue Service marked the start of Cybersecurity Awareness Month by issuing a public reminder urging taxpayers, tax professionals, and businesses to implement fundamental security practices to protect sensitive tax and financial data. The advisory emphasizes multi-factor authentication, anti-phishing vigilance, secure software updates, and encrypted data storage as critical defenses against identity theft and refund fraud. The IRS highlighted its ongoing collaboration with the Security Summit partnership—comprising state tax agencies and private-sector tax industry leaders—to combat evolving cyber threats targeting the tax ecosystem.

Key Takeaways

  • Mandatory Safeguards for Tax Pros: Tax return preparers are reminded of their legal obligation under the Gramm-Leach-Bliley Act and IRS Publication 4557 to maintain a written information security plan (WISP) tailored to their operations.
  • Identity Protection PIN Expansion: The IRS encourages all taxpayers to opt into the Identity Protection PIN (IP PIN) program, which adds a six-digit verification layer to federal tax filings, significantly reducing fraudulent return submissions.

Disclaimer: This article is compiled and summarized by the AI based on publicly available information and is for general information purposes only. It does not constitute any form of formal tax advice, legal opinion, or basis for performance. Please consult a qualified professional tax advisor or legal counsel for tax advice.

Source: Read Official Announcement