Federal watchdogs say the Internal Revenue Service could not reliably spot staff who searched the tax files of public figures, even after years of warnings and upgrades.
Story Snapshot
- Auditors flagged 86 suspicious lookups of 30 high-profile taxpayers by 52 IRS employees from 2022–2025.
- The IRS lacked a systemwide way to block or detect browsing of celebrities and public officials’ accounts.
- Rules and penalties exist, but monitoring and taxpayer notifications were inconsistent, auditors found.
- The IRS says it has improved logging, encryption, and data controls, but gaps remain.
Watchdog Findings on High-Profile Account Searches
The Treasury Inspector General for Tax Administration reviewed audit logs from 2022 through November 2025. The team identified 86 suspicious accesses involving 30 high-profile taxpayers by 52 Internal Revenue Service employees. The report states the agency had no method to prevent or systematically detect browsing of celebrities and public officials’ accounts. That gap allowed improper searches to occur without an automatic block or alert tied to sensitive names.
The findings follow years of data leaks and control warnings across the tax agency. The Government Accountability Office defines unauthorized access as willful inspection without a work need and notes it is a crime. Prior reviews show thousands of investigations over the past decade, with only a share confirmed as violations. That pattern shows both frequent allegations and a monitoring challenge inside a large workforce handling sensitive data daily.
What IRS Rules Say and Where Practice Fell Short
The Internal Revenue Manual bars employees and contractors from browsing any taxpayer account without a need-to-know. That includes records of coworkers, family, politicians, and celebrities. The manual also assigns the Treasury Inspector General to probe any suspected unauthorized access and, when proven, to refer cases for discipline or prosecution. Despite these rules, auditors found the agency did not consistently notify affected taxpayers in closed cases, leaving some people unaware of potential misuse.
Auditors reported that in 2025 the agency closed 122 unauthorized-access cases, but proper written notice went to only a part of those impacted. That gap matters. People cannot defend their privacy or monitor for fallout if they are never told. The split between policy and practice deepens a trust problem that cuts across party lines. Citizens expect strict handling of tax data because the government compels them to hand it over.
IRS Says Controls Improved, But Oversight Still Flags Risks
Internal Revenue Service officials told reviewers they strengthened protections after past breaches. Steps included better audit logging, tighter limits on sharing sensitive information, disabled external storage, stronger encryption, and more staff training on data duties. Technology upgrades help, but the watchdog still found no reliable, systemwide way to tag and shield high-profile accounts from browsing. The contrast shows progress, yet leaves a clear blind spot where abuse can hide.
Oversight groups have pushed for years to fix access control gaps. The Government Accountability Office has issued hundreds of recommendations on data governance, account controls, and system monitoring. Many items remain open. The sheer volume of tax processing and the number of employees with access make perfect prevention hard. Still, when the stakes involve the private finances of every citizen, “hard” is not an excuse for holes that persist year after year.
Why This Matters Beyond Partisan Lines
People on the right see proof that a powerful agency can pry without cause. People on the left see another system favoring insiders who face weak checks. Both read the same message: basic privacy promises are not being kept. When public figures are at risk, regular filers are too. The law treats willful unauthorized inspection as a crime, and the agency must show that enforcement is real, notices are prompt, and controls stop abuse before it starts.
Congress controls funding and oversight. Lawmakers can tie dollars to specific fixes: stronger high-profile account tagging, better real-time alerts, and automatic, trackable notices to victims. The Treasury Inspector General can continue surprise tests and publish metrics on time to detect and time to notify. Clear, public scorecards would let taxpayers judge progress, not promises. Trust returns when systems prevent harm, not when apologies arrive months later.
Bottom Line for Taxpayers
The latest audit shows the Internal Revenue Service still struggles to police its own access to your data. The rules are tough on paper, but sensitive accounts were not shielded in practice, and notices fell through. The agency says it is improving controls, yet watchdogs still find important gaps. Respect for privacy—and confidence in equal treatment under the law—depends on closing those gaps fast and proving it with results, not memos.
Sources:
pjmedia.com, tigta.gov, dailycaller.com, irs.gov, gao.gov
