Filed under: Internet, Security

Turbo Tax flaw leaves online tax return data vulnerable

Turbo TaxA Nebraska woman recently found a glitch in the way Turbo Tax lets users file their taxes over the web. By trying to access information she had filed in previous years, she found a way to access data three other users had previously uploaded.

Each of those other users had the same last name as the woman, but different first initials. The information included social security numbers and bank account numbers.

Turbo Tax is looking into the error, and has temporarily removed the link that lead to the exploit.

The exploit only affects users who file their taxes online with Turbo Tax. There shouldn't be any risk in using the software to assist in filing via mail.

Still, it makes you think twice about providing sensitive personal data to any website, even one that you'd expect to have tight security.

[via Computer World]