Medical professionals in ten states have become victims of identity theft, after someone used their personal information, including Social Security Number, to file fraudulent tax returns.
In a majority of the cases, the victims were made aware of the situation after they attempted to submit their federal returns electronically, only to be told that someone had already filed them.
The scam includes fraudulent returns at both the federal and state level, targeting various medical professionals, including nurses, physicians, dentists, and oral surgeons. So far, victims in Indiana, Massachusetts, Maine, New Hampshire, South Dakota, Iowa, North Carolina, Colorado, Connecticut, and Vermont have come forward. Moreover, similar reports of fraudulent returns have surfaced in Puerto Rico as well.
In Indiana, the state's medical association (ISMA) issued an alert to healthcare professionals, warning them of the scam and encouraging victims to come forward. In addition to the warning, the ISMA also said that the Indiana Department of Revenue (DOR) is investigating the situation.
In all, more than 100 professionals have come forward, reporting a fraudulent tax return at either the state or federal level. Some have reported both. In a statement, Julie Reed, ISMA general counsel, recalled her conversations with the DOR investigation unit.
"The DOR is viewing this as a large problem and officials are very concerned. While their investigation has not yet identified the source of the presumed breach, they are tracking all the cases, looking for patterns, and actively investigating and pursing leads."
Chuck Taylor, of the Indiana Attorney General's Identify Theft Unit, said that his office is actively investigating complains, but added that they've yet to identify a common source of compromise.
Investigators are also unsure as to how the medical professional's information was obtained. While the possibility of a data breach hasn't been ruled out, evidence of such a security incident hasn't surfaced.
The Michigan Dental Association (MDA) reported the same scenario earlier this month, after members reported attempting to do their taxes online, only to be told that they had already been filed. The MDA warning, similar to the one issued in Indiana, also encouraged anyone who suspects they may be a victim to report the incident in order to help track the scam's reach.
In New England, several state medical associations issued warnings about the scam, each noting the same discovery process. However, medical professionals in those states also reported learning about the problem after receiving a 5071C letter from the IRS.
A 5071C letter is issued when the IRS needs additional information to verify a person's identity. These notices are sent when the IRS has received a federal return, but before it can be processed, additional information is required. Quite often, in the case of identity theft, these notices are one of the first warnings that something is wrong.
Sign up for Computerworld eNewsletters.