Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

4/23/2009
04:40 AM
50%
50%

10 After-Tax-Filing Security Tips

Filing your taxes isn't the end of the story. You've also got to be sure that you the electronic information you submit doesn't fall prey to identity theft. Think it can't happen to you? Tell that to the 10 million Americans who had their identity stolen last year.

Filing your taxes isn't the end of the story. You've also got to be sure that you the electronic information you submit doesn't fall prey to identity theft. Think it can't happen to you? Tell that to the 10 million Americans who had their identity stolen last year.Identity thieves seek a combination of personal information to do their damage to your credit rating, which for a small business owner could damage not just personal finances, but also business solvency. Unfortunately, electronic tax documents are rich hunting grounds for identity thieves according to Todd Feinman, the CEO of Identity Finder, a security and privacy software vendor. "Stored tax documents are a gold mine for hackers because a tax return contains at least one person's social security number and a tremendous amount of other relevant, personal information," he says. "Once thieves get an SSN, they can potentially wreak havoc on a victim's credit."

Because they contain such sensitive data, it's crucial to take extra measures to keep your electronic tax information safe. Feinman suggests these 10 steps:

  1. When storing a copy of your tax return on your computer, make sure you secure it with a password so that your SSN cannot be read if the file is lost.
  2. Securely delete all electronic, financial documents used to prepare your tax returns so any personal information is safe.
  3. Ignore all refund/rebate/warning e-mails claiming to come from the IRS and never click on links within those e-mails because it is most likely a phishing attack.
  4. Do not provide personal information to anyone calling you claiming to be from the IRS; the IRS already has your information and it's likely to be an identity thief calling you.
  5. Check your credit report with one of the three credit bureaus free every four months at www.annualcreditreport.com to make sure your identity hasn't already been stolen.
  6. Install the latest updates to your operating system so known Windows or Mac vulnerabilities can't be exploited by hackers.
  7. Don't save your password in your Web browser when accessing banks and other institutions that keep your personal information because it could be leaked if you ever get a virus, Trojan, or are hacked.
  8. If you provided your bank account and routing information to the IRS for payment or refunds, check your bank accounts to ensure the proper transfer occurred.
  9. Visit your bank account online and set up alerts on your accounts to monitor when high amounts of cash are withdrawn.
  10. Make sure you do not receive incorrect payment liability or refund information; a thief could have filed a tax return on your behalf fraudulently. If you suspect tax preparation fraud, call the State Tax Department toll-free at 1-888-675-9437.

bMighty bSecure is a virtual event designed to help your company stay secure in the most cost-effective way possible. bMighty and InformationWeek editors will bring together SMB security consultants, analysts, and other experts, along with real IT execs and users from small and midsize companies to share the secrets of keeping your company secure without breaking the bank.
REGISTER NOW!

Don't Miss:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Stop Defending Everything
Kevin Kurzawa, Senior Information Security Auditor,  2/12/2020
Small Business Security: 5 Tips on How and Where to Start
Mike Puglia, Chief Strategy Officer at Kaseya,  2/13/2020
Architectural Analysis IDs 78 Specific Risks in Machine-Learning Systems
Jai Vijayan, Contributing Writer,  2/13/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-1811
PUBLISHED: 2020-02-18
GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.
CVE-2020-1815
PUBLISHED: 2020-02-18
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a memory leak vulnerability. The software does not sufficiently track and release allocated memory while parse...
CVE-2020-1816
PUBLISHED: 2020-02-18
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability. Due to improper processing of specific IPSEC packets, remote attacker...
CVE-2020-1830
PUBLISHED: 2020-02-18
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message. This cause...
CVE-2020-1882
PUBLISHED: 2020-02-18
Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 vers...