100,000 HMRC accounts hit as scammers steal £47m in phishing attack
The personal tax accounts of tens of thousands of people were breached in what two senior civil servants at HMRC described to the Treasury Committee as an "organised crime" incident that began last year.
According to John-Paul Marks, the chief executive of HMRC, the UK's tax authority, 100,000 people have been contacted, or are in the process of being contacted, after their accounts were locked down. He added that taxpayers affected by the breach will suffer "no financial loss".
Mr Marks told the Committee: 'It's about 0.2% of the PAYE population, around 100,000 people, who we have written to, are writing to, to notify them that we detected activity on their PAYE account.'
Asked if this applied to individual working people's PAYE accounts, not companies, he replied: 'That's right, individuals. To be clear, no financial loss to those individuals.
Mr Marks added: 'This was organised crime phishing for identity data outwith of HMRC systems, so stuff that banks and others will also unfortunately experience, and then trying to use that data to create PAYE accounts to pay themselves a repayment and/or access an existing account.'
An investigation into the matter, which took place last year 'including jurisdictions outside the UK', led to 'some arrests last year,' Mr Marks told MPs.
Angela MacDonald, HMRC's deputy chief executive and second permanent secretary, added: 'At the moment, they've managed to extract repayments to the tune of £47 million.
'Now that is a lot of money, and it's very unacceptable.
'We have overall, in the last tax year, we actually protected £1.9 billion worth of money which sought to be taken from us by attacks.'
Ms MacDonald stressed the breach was 'not a cyber attack, we have not been hacked, we have not had data extracted from us'.
She later added: 'The ability for somebody to breach your systems and to extract data, to hold you to ransomware and all of those things, that is a cyber attack. That is not what has happened here.'
HMRC said it had locked down affected accounts and deleted log-in details to prevent future unauthorised access.
Any incorrect information has been removed from tax records and officials have checked to ensure no other details have been changed.
People affected will receive a letter from HMRC over the next three weeks.
Elsewhere, Mr Marks told MPs that HMRC phone lines were down on Wednesday afternoon, but said this was 'coincidental'.
They will be 'back up and available in the morning', he added.
An HMRC spokesperson said: 'We've acted to protect customers after identifying attempts to access a very small minority of tax accounts, and we're working with other law enforcement agencies both in the UK and overseas to bring those responsible to justice.
'This was not a cyber-attack – it involved criminals using personal information from phishing activity or data obtained elsewhere to try to claim money from HMRC.
'We're writing to those customers affected to reassure them we've secured their accounts and that they haven't lost any money.'
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
BBC News
9 minutes ago
- BBC News
Government expands police use of live facial recognition vans
More live facial recognition (LFR) vans will be rolled out across seven police forces in England to locate suspects for crimes including sexual offences, violent assaults and homicides, the Home Office has announced. The forces will get access to 10 new vans equipped with cameras which scan the faces of people walking past and check them against a list of wanted people. The government says the technology has been used in London to make 580 arrests in 12 months, including 52 registered sex offenders who breached their conditions. However, campaign group Big Brother Watch said the "significant expansion of the surveillance state" was "alarming". Live facial recognition was first used in England and Wales in 2017 during the Uefa Champions League final football match in Cardiff. Since then its use has largely been confined to South Wales, London and Essex including at a Beyoncé concert to scan for paedophiles and terrorists. The government is now funding ten vans equipped with LFR to be shared between seven forces, approximately doubling the number of vehicles. The seven forces are Greater Manchester, West Yorkshire, Bedfordshire, Surrey, Sussex, Thames Valley and Hampshire. The technology identifies people by taking measurements of facial features including the distance between the eyes and the length of the jawline and then comparing the data to to an existing watchlist. Each van will be staffed with a trained officer who checks the matches identified by the technology. Simultaneously, the government is holding a consultation on what safeguards are needed to "ensure transparency and public confidence", ahead of drawing up a new legal framework. Big Brother Watch is bringing a legal challenge against the Met Police's use of the technology, alongside Shaun Thompson, who was wrongly identified by an LFR camera. Rebecca Vincent, interim director of Big Brother Watch, said: "Police have interpreted the absence of any legislative basis authorising the use of this intrusive technology as carte blanche to continue to roll it out unfettered, despite the fact that a crucial judicial review on the matter is pending."The Home Office must scrap its plans to roll out further live facial recognition capacity until robust legislative safeguards are established."Charlie Whelton, policy and campaigns officer at Liberty, said: "It's welcome news that the government will finally develop a statutory framework on the use of facial recognition, but this should be in place before more facial recognition technology is rolled out."There's no reasonable excuse to be putting even more cameras on our streets before the public have had their say and legislation is brought in to protect all of us."The government says officers using the LFR vans will need to follow the College of Policing's guidance on the technology and the Surveillance Camera Code of Practice. It also says independent testing of the facial recognition algorithm by the National Physical Laboratory found that "the algorithm is accurate and there is no bias for ethnicity, age or gender at the settings used by the police".Chief Superintendent of South Wales Police Tim Morgan said: "We understand the concerns which are raised about the use of live facial recognition technology and we use any new technology ethically and spend time and effort making sure it's deployed in line with all legislation and guidance."The Police Federation of England and Wales, which represents police officers, said: "The government must also invest in comprehensive training programmes for officers to accompany this technology rollout, particularly as police forces face an unprecedented officer retention crisis."Home Secretary Yvette Cooper said the government would "provide police with the tools they need to do their jobs". "Facial recognition will be used in a targeted way to identify sex offenders or people wanted for the most serious crimes who the police have not been able to find." The Home Office has also announced that it has fulfilled a manifesto pledge to ensure there is a named, contactable officer in every neighbourhood in England and Wales. It said people can search for an officer on the website of local police forces, who have signed up to a commitment to respond to queries within 72 hours. The type of contact method provided will be up to individual forces.
Daily Mail
9 minutes ago
- Daily Mail
Trans Met Police volunteer, 27, met with 'rape victim' when she was so young she was 'interested in things like teddies', court hears
A transgender volunteer police officer allegedly told his victim he wanted to have sex with her despite her being 'so young' she was still interested in teddy bears, a court heard. James Bubb, who now identifies as a woman named Gwyn Samuels, was violent towards the complainant despite her asking them to be gentle when taking her virginity while in her early teens, Amersham Law Courts heard. In a police interview played to the court on Tuesday, the alleged victim told officers that at the age of 12, she was being 'hidden' when the pair were in public together and that the defendant, who was 21, looked 'paranoid' when with her. The complainant, who met Bubb on video-chat site Omegle in 2018, also spoke of how she was 'frozen' when the now 27-year-old defendant attempted to engage in sexual activity in public shortly before her 13th birthday. She told officers she had said to the defendant that she was five years older than she actually was when they first met - but insisted that a number of incidents when they were together would have meant he knew she was underage. The alleged victim said: 'He knew at the time that I was very much interested in things like teddies.' She told police of their first in-person meeting at a Christian festival where Bubb, who was working as a volunteer steward for Metropolitan Police at the time, made remarks about going into her tent and having sex with her. She spoke of how the pair met up away from other festival-goers and said her colour-coded child wristband was clearly on show. The alleged victim said: 'He was really paranoid, looking around constantly.' She added: 'We were in a relationship in my eyes but I was being hidden whenever we were in public. 'He made remarks in person about when it was dark... about coming into my tent and having sex with me. 'I was actually so young at that point that I had a teddy bear in my tent. He knew at the time that I was very much interested in things like teddies.' Addressing how she felt when the defendant spoke of going into her tent, she added: 'I said I wasn't comfortable with that... and I believe he sent me a text on Snapchat at that point and he said he was probably going to come into my tent either way - maybe while I was sleeping. 'I remember being scared that night.' The complainant went on to speak about how, when the pair started having sex, Bubb was violent. Telling officers about when the defendant took her virginity, she said: 'He had his hands around my throat. I tried to get words out but they weren't coming out as easily.' She told the officer that sometimes the defendant was 'hitting me during sex... sometimes he would punch me'. The alleged victim added: 'He would also make remarks about raping me. 'He told me I enjoyed being raped and when I said no, he didn't stop and that's when he made these specific remarks.' The defendant has denied one count of rape in relation to one complainant, and two counts of rape, two counts of sexual activity with a child, one count of assault of a child under 13 by penetration, one count of rape of a child under 13 and one count of assault by penetration in relation to the other complainant. All charges are alleged to have taken place between January 1, 2018 to April 2, 2024. The defendant, of High Street, Chesham, Buckinghamshire, denies all charges. The trial continues.
Daily Mail
9 minutes ago
- Daily Mail
Dragons' Den icon Theo Paphitis warns 'high streets will not survive if shops are hit in next Budget'
Dragons' Den icon Theo Paphitis has warned of mass closures if shops are hit even harder at the next Budget. The businessman, who owns the stationary chain Ryman, issued a stark warning that the UK high street may not survive further tax hikes. Companies are already being hit with hefty business rates - with speculation growing Chancellor Rachel Reeves may pile on the pain in the autumn. Mr Paphitis highlighted the immense burden smaller businesses are carrying compared to online giants who are paying 'next to nothing'. Firms have also been battered by hikes in National Insurance contributions and an inflation-busting increase in the minimum wage which came into effect in April. Writing in The Sun, Mr Paphitis said: 'After everything the high street has been through, asking it to carry even more weight would be the final straw for many. 'The government must ensure that no shop pays more in the upcoming Autumn Budget.' He added: 'Once a shop shuts, it is far harder and costlier to bring it back, meaning each closure represents a long-term wound to the health of the high street.' Mr Paphitis has previously criticised the business rates system, which he says the government has failed to properly reform. He argued that it unfairly hits bricks and mortar businesses, while online and technology giants only face the tax on their warehouses. Mr Paphitis's comments come as store closures this year are predicted to top 17,000 this year. It is the highest figure since the Centre for Retail Research (CRR), which compiled the report, began collecting the data in 2015 and follows the closure of 13,479 stores last year. The vast majority of closed shops in 2024 – 11,341 – were independent retailers, a 45.5 per cent jump against the previous year. Business leaders have called for the Chancellor to 'urgently' change course with her tax-raising policies to prevent British high streets from becoming ghost towns. The CRR's forecast of 17,350 store closures would make 2025 worse than 2022, when the withdrawal of government support measures following the pandemic caused 17,151 shops to close. Around 16,145 stores shut their doors at the height of lockdown in 2020. Professor Joshua Bamfield, director of the CRR previously said: 'Whilst the results for 2024 show that although the outcomes for store closures overall were not as poor as in either 2020 or 2022, they are still disconcerting, with worse to come in 2025.' Of the predicted 2025 figure, the vast majority of store closures, 14,660, are expected to be independent retailers. These firms usually operate on very tight profit margins and may not have enough cash to cover the cost of the Treasury's tax raid and minimum wage hikes. 'This is a tragic scenario that we warned the government could come to pass if they did not change course,' said Andrew Goodacre, head of the British Independent Retailers Association. He added: 'Overall costs for independent retailers are going up and the planned increases in National Insurance, minimum wage and business rates will leave many with no choice but to shut up shop.' Ms Reeves declared in October that employers would pay a 15 per cent National Insurance rate on staff salaries exceeding £5,000 from April rather than the current 13.8 per cent levy on wages above £9,100. She also said the National Living Wage would go up by 77p to £12.21 per hour, alongside increases in the capital gains tax rates on selling business assets. Retailers have been among those leading the charge against the Chancellor's punishing tax measures. In November, more than 80 bosses signed an open letter to Reeves warning that her Budget plans would force them to hike prices, cut jobs and close stores. Signatories included the heads of high street giants Marks & Spencer, Next and John Lewis as well as the major supermarkets such as Tesco, Sainsbury's, Morrisons and Asda. Meanwhile, firms have called for ministers to reform the business rates system to make physical shops more competitive with their online counterparts.
