Parcel Plus tax preparation service reports data breach affecting customer tax returns

Parcel Plus, a tax preparation business in Hanover, Pennsylvania, has reported being the victim of a spear phishing attack targeting tax returns. The incident has affected multiple customers who had their tax refund direct deposit information altered.

The attack targeted tax preparation services offered by Parcel Plus. Of the approximately 5,000 federal tax returns prepared by the business this season:

• 21 clients have been confirmed to have had their direct deposit information switched to unauthorized accounts
• The company suspects there may be additional compromised returns yet to be identified

The number of affected individuals is not disclosed.

The breach, which Parcel Plus announced on 27th of March, is reportedly "being linked to foreign actors" according to the company's statement. The FBI has opened a case file and is actively investigating the incident.

Parcel Plus states they are working closely with the Internal Revenue Service (IRS), their software provider and law enforcement authorities. According to their statement, the IRS has assured them that all affected customers will receive their proper tax refunds, though additional paperwork will be required and compromised returns will need to be submitted by mail, causing delays.