‘Incredibly sensitive’ data is open to cyberattack at Mass. tax-collection agency, audit report says
Colin A. Young reports:
The state auditor has determined that the Department of Revenue has not done enough to defend sensitive taxpayer data like Social Security numbers and payment histories from cyberattacks, and the agency is working to bolster its strategic planning and training.
The audit did not unearth new instances in which sensitive data had been compromised, but Auditor Suzanne Bump’s office found that DOR “was not prepared to respond to or mitigate cyberattacks it or its vendors face” and “did not have procedures in place to guide its response to IT security incidents.”
Read more on SouthCoast Today.