Episode

38 Minutes of Access: Inside a Real Tax Office Hack

Podcast
Federal Tax Updates
Published
Nov 10, 2025
Duration seconds
3354
Processing state
not_requested
Canonical source
https://share.transistor.fm/s/32376335
Audio
https://op3.dev/e/media.transistor.fm/32376335/46fcffe8.mp3
JSON
/v1/public/podcasts/federal-tax-updates-5954475/episodes/38-minutes-of-access-inside-a-real-tax-office-hack
Markdown
/podcast/federal-tax-updates-5954475/38-minutes-of-access-inside-a-real-tax-office-hack.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/federal-tax-updates-5954475/episodes/38-minutes-of-access-inside-a-real-tax-office-hack/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/federal-tax-updates-5954475/38-minutes-of-access-inside-a-real-tax-office-hack.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

John Barucci joins the show to break down his real-life data breach. John thought he had all the right safeguards in place: cyber insurance, firewalls, security training, and a written information security plan. But a single click on what appeared to be a Social Security Administration email led to bad actors accessing nine client files, altering returns, and changing bank account information in just 38 minutes. Sponsors Padgett - Contact Padgett or Email Jeff Phillips Get NASBA Approved CPE or IRS Approved CE Launch the course on EarmarkCPE to get free CPE/CE for listening to this episode. Chapters (00:00) - Introduction and Greetings (00:41) - Current Events and Government Shutdown (01:41) - PTIN Renewal and Security Measures (02:44) - Introducing John Bucci's Story (04:19) - John Bucci's Cybersecurity Breach Experience (06:03) - Detailed Chronology of the Breach (18:23) - Immediate Actions Taken Post-Breach (21:59) - IRS and Software Company Responses (26:00) - Client Communication and Further Steps (29:32) - The Weight of Responsibility in Tax Practice (30:20) - The Importance of Having a Plan (31:26) - Immediate Actions Post-Breach (31:51) - Involvement of Thomson Reuters and Stopping the Breach (33:19) - Forensic Investigation and Legal Steps (34:46) - Cyber Insurance and Its Benefits (36:48) - IRS Practitioner Relief Program (42:25) - Final Reflections and Lessons Learned (49:00) - Conclusion and Final Thoughts Follow the Federal Tax Updates Podcast on Social Media twitter.com/FedTaxPod facebook.com/FedTaxPod linkedin.com/showcase/fedtaxpod Connect with John: https://www.linkedin.com/in/johnbarucci Connect with the Hosts on LinkedIn Roger Harris Annie Schwab Review Leave a review on Apple Podcasts or Podchaser Subscribe Subscribe to the Federal Tax Updates podca…