Urban Institute’s Form 990 Online & e-Postcard Systems Hacked

The Urban Institute’s National Center for Charitable Statistics reported last month that its e-filing systems had been compromised by apparent hackers.  The Center’s website provides the following Security Alert:

Unauthorized parties have gained access to the Form 990 Online and e-Postcard Systems.  If you are a user of either of these sites, we encourage you to reset your password immediately.  Please click here for details and answers to Frequently Asked Questions.

e-Postcard users (if you file Form 990-N) please click here to reset your password.

Form 990 Online users click here to reset your password.

If you have not changed your password since the unauthorized access, the system will require you to change it when you log in.

According to a report in The Hill, improper access appears to have been limited to usernames, passwords, IP addresses, and other account data for nonprofits, with no evidence that the tax filings made through this system were compromised.  The system does not have more sensitive data, such as Social Security numbers or credit card information, so no such data was at risk.  The system is, however, used by between 600,000 and 700,000 organizations.

Additional coverage: Huffington PostThe NonProfit Times.

Lloyd Mayer