The UK Parliament’s Treasury Committee published a letter to HM Revenue and Customs (HMRC) warning that HMRC’s failure to report details of a breach affecting around 100,000 taxpayers was “unacceptable”. The breach only became apparent to the Committee when a notification was published on HMRC’s website on the same day as a live session, and it involved an estimated cost to taxpayers of around GBP 47 million. During the session, HMRC witnesses told the Committee the department had worked with agent and representative bodies on the incident. The Committee also published a letter from the Association of Chartered Certified Accountants stating it had not discussed the phishing incident with HMRC and was not aware of it prior to the Committee’s hearing on 4 June.
UK Parliament 2025-06-10
UK Parliament’s Treasury Committee warns HMRC over undisclosed phishing breach affecting 100,000 taxpayers and costing GBP 47 million
The UK Parliament’s Treasury Committee criticized HM Revenue and Customs (HMRC) for not reporting a breach affecting approximately 100,000 taxpayers, costing around GBP 47 million. The breach was only disclosed on HMRC’s website on the day of a live session. The Association of Chartered Certified Accountants stated it was unaware of the incident before the Committee's hearing on 4 June.