TIGTA Audit Exposes IRS Gaps in Detecting Unauthorized Access to High-Profile Taxpayer Records, Highlighting Persistent Privacy Risks

A September 2026 report by the Treasury Inspector General for Tax Administration (TIGTA) details systemic weaknesses in the IRS Unauthorized Access (UNAX) program, identifying 86 suspicious accesses by 52 employees to the tax records of 30 high-profile taxpayers—including government officials, business leaders, and entertainers—between 2022 and 2025. Auditors examined Integrated Data Retrieval System (IDRS) logs and found that certain 'NAMES' search commands bypassed standard monitoring, allowing employees to query accounts without triggering alerts. The IRS had no dedicated preventative controls or detection mechanisms specifically for celebrity or public official accounts, despite internal policies prohibiting such browsing without authorization.[1][1]

Of the 52 employees, only some faced termination; 22 remained employed despite confirmed improper access, receiving lesser discipline. Broader review of 122 closed UNAX cases from FY2023–2025 revealed notification failures affecting 276 taxpayers: 175 due to procedural lapses and 101 because responsible employees resigned or retired before action. These gaps left victims without timely opportunity for protective measures like credit monitoring. TIGTA referred the 86 cases for further investigation and issued eight recommendations on access controls, system improvements, and notification standards; the IRS agreed with most, targeting fixes by December 2026.[2][3]

This audit builds on prior scandals, including the 2024 sentencing of contractor Charles Littlejohn for leaking records of Trump and wealthy taxpayers, and Trump's subsequently dropped $10 billion lawsuit alleging inadequate protections. The findings underscore how post-breach enhancements still fail to curb curiosity-driven or targeted access, raising questions about power imbalances in a system holding sensitive financial data on millions. Connections to broader debates include the tension between employee access needs and privacy safeguards, potential for selective enforcement, and risks to public trust in tax administration amid political sensitivities.