Tax fraud wave swells after criminals pop ADP payroll data forms An unknown number of staff at US corporations are at high risk of having their tax returns plundered after criminals siphoned their publicly-disclosed personal details and a unique company URL to obtain their records from payroll provider ADP. The breach disclosed by Krebsonsecurity does not appear to be a direct breach of ADP …
This kind of fraud doesn’t seem to get reported for the UK.
I can't work out if the UK system is more secure or too cumbersome for the fraud to be effective.
I don't recall online access to the company payroll system from the Internet, though.
Tax returns based on a paper P60.
"I can't work out if the UK system is more secure or too cumbersome for the fraud to be effective."
You decide. Here's how I do my self assessment, which takes around 30 mins, most of which is spent on the first three stages:
* Google various keywords and click on random .gov.uk links until the portal magically appears out of the haze (it is over https)
* Look up username/password that only a database could possibly remember - the uid looks like a MD5 hash. The password policy is stricter than any you (probably) have ever seen.
* Mistype uid/password until I accidentally gain access
* Type in details off P60 etc
* Wait for the IncomeTax-O-Generator to access /dev/random and calculate the damage
* Pay tax via a third party site
To be fair to them it is getting a little easier each year. In the near future SA will become a self calculating,direct from bank n payroll affair. What could possibly go wrong with that?
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
