IRS suspends Equifax contract

After a tough congressional hearing and news of more infosec woes at Equifax, the IRS suspended a $7.2 million contract with the credit monitoring agency.

IRS seal
 

The IRS confirmed today that it has suspended a $7.2 million bridge contract awarded to Equifax for identity management and authentication services.

The decision comes one week after the agency received a torrent of criticism from members of Congress and the public for the award and less than one month after Equifax revealed that hackers had stolen the sensitive personal information of 145 million Americans. Yesterday, Equifax announced that code from a third-party vendor the company used to collect online performance data was pushing malware to visitors of its website.

In a statement to FCW, the IRS said the suspension was temporary and precautionary and that no IRS data was affected.

"During this suspension, the IRS will continue its review of Equifax systems and security. The IRS emphasized that there is still no indication of any compromise of the limited IRS data shared under the contract," the agency said.

At an Oct. 4 House hearing, IRS officials told lawmakers that a bid for identity management services and e-authentication of taxpayer identities was initially awarded to another contractor, later confirmed to be Experian Information Solutions. However, Equifax was the incumbent contractor for those services, and it filed a procurement protest that wouldn’t be resolved until after the current contract expired.

According to IRS officials, that forced the agency to award a bridge contract or stop providing identity-proofing work for Secure Access, its online accounts and transcripts application.

The Government Accountability Office later disputed the assertion that IRS had no choice, saying contracting law allowed for the agency to start working with Experian by citing urgent and compelling circumstances that would significantly affect the interests of the U.S. government.

IRS said it will be unable to create new Secure Access accounts until the issue is resolved and a new contractor comes onboard, but current users will not be affected. Taxpayers will still have the option of receiving mailed transcripts in the interim.

NEXT STORY: House passes FITARA extension