U.S. Senators Todd Young (R-Ind.) and Mike Crapo (R-Idaho) joined Republican colleagues on the Senate Finance Committee in sending a letter to Internal Revenue Service (IRS) Commissioner Charles Rettig, to press the agency on its weak responses to the massive apparent leaks. Nearly six months after ProPublica began disclosing confidential, private, and legally-protected taxpayer information, the IRS and the Biden Administration continue to show little regard for the haphazard handling of private taxpayer data. 

ProPublica unabatedly continues to publish articles naming individual taxpayers while the IRS, the Department of the Treasury, the Federal Bureau of Investigation, and the Department of Justice have all failed to identify the source or sources of the leaked information.  

“[…] ProPublica continues to publish what appears to be confidential taxpayer information that is protected by law, and as Commissioner, you have been a proponent of the IRS being allowed access to even more information from taxpayers and a significant and mandatory enforcement budget. The fact that the source of the information ProPublica continues to publish remains unknown means that the ability of the IRS to safeguard information already entrusted to it also remains unknown. It is possible that ProPublica obtained whatever information it has at one time from a specific source. However, if the ProPublica information was leaked or hacked from the IRS, and the IRS is unable to even determine if a leak or hack took place, this could indicate an ongoing and persistent problem with IRS information technology (IT) systems and the ability of the IRS to safeguard taxpayer information,” the senators wrote in the letter.

The letter notes known deficiencies in IRS systems and highlights data and privacy security vulnerabilities involved in contractor relationships. The members also request further, detailed information about the IRS’s efforts to determine a source of the leaks, and what the IRS has done to resolve open recommendations for curing deficiencies.

“As we enter month six with no information about how ProPublica obtained protected taxpayer information, the risks we highlighted in this letter are of growing concern,” the letter continues. “It is our constitutional obligation to ensure that IRS enforcement remains effective, and that requires the IRS to properly secure taxpayer information.”

To view the full letter, click here.