Dear Commissioner Koskinen:
As members of the Senate Banking Committee, we write today with great concern about a contract the Internal Revenue Service (IRS) awarded to Equifax Information Services LLC on September 29, 2017. This contract, award number--TIRNO17K00497--was issued by the IRS to Equifax "to verify taxpayer identity and to assist in ongoing identity verification and validations needs of the Service." It's our understanding that this contract was issued as a sole source order and that the IRS will pay Equifax $7,251,968 in taxpayer funds to provide these verification services. While we understand the IRS's need to verify taxpayer identities to help support the IRS's core mission and help it ensure that tax returns and refunds are properly administered, we strongly urge you to rescind this contract and look for other ways to verify taxpayers' identities.
Given the recent cyber-attack at Equifax, it's unfathomable how the IRS could knowingly issue a multi-million-dollar contract to a company that carelessly handled the personal information of more than 145 million Americans, putting their identities and personal financial wellbeing at risk. Nearly one half of the entire population of our nation was impacted by the Equifax breach and we have no assurances that our constituents' personal information is safe in their hands.
After learning of the cyber-attack, Equifax executives waited days to notify law-enforcement of the hack, and they brazenly kept the breach from their primary regulators and the American public for nearly six weeks. There is also an ongoing investigation into reports that certain executives may have committed insider-trading violations prior to the companies' public disclosure of the incident. It is inappropriate to send this company American taxpayer dollars while this and other investigations and reviews continue.
These actions prove that the IRS should immediately rescind this contract and look for ways to address its needs without putting taxpayers' information at risk. The IRS's contract award to Equifax is a clear disregard for the millions of Americans who had their personal information carelessly stolen by Equifax, and we hope you reconsider this matter. We appreciate you hearing our request. We look forward to hearing from you in a timely manner.
Sincerely,