D.C.'s tax system won plaudits but couldn't stop alleged insider thefts
Prosecutors say tax office workers cashed fake refund checks despite rollout of $100M system
Computerworld - For more than a decade, employees in the District of Columbia's Office of Tax and Revenue cashed millions of dollars' worth of property tax refunds made out to fake corporate accounts, and then spent the money on real estate, cars, clothing and luxury goods, the U.S. Department of Justice charged in November.
And much of that happened under the nose of a $100 million tax system that became fully operational in 2002 after three years of development.
Ten people, including two D.C. workers, have been arrested thus far as part of an ongoing investigation by the DOJ and local authorities. Federal prosecutors say that the employees had developed a complex scheme for cutting checks averaging $388,000 each to sham accounts. One employee allegedly spent about $1.4 million at Neiman Marcus starting in September 2000. Court documents point to the theft of at least $20 million and suggest that the actual total may be even higher.
While the alleged thefts were taking place, IT contractor Accenture Ltd. built the new tax system for the D.C. government. The technology was designed to modernize tax operations by combining previously separate income, property and sales tax systems and creating a single database for tax information. The Integrated Tax System (ITS) also includes CRM software and gives taxpayers access to online services.
The new system was built to do a lot of things — except, apparently, prevent the theft of millions of dollars by rogue insiders.
The ITS didn't flag the allegedly fraudulent activities because they happened outside of the system, according to D.C. and Accenture officials. The alleged perpetrators "did not go anywhere near the ITS," said Mike Teller, CIO in the district's Office of the Chief Financial Officer. "As far as we know, everything that they did, they did because they went around the system."
Echoing Teller's words, Accenture spokesman Peter Soh said: "The perpetrators did not use our tax system to commit this fraud. Our understanding is that they used other means." He added that Accenture hasn't been contacted by the investigators in the case.
But that begs the question of why a key business process such as writing tax refund checks could even be completed outside of the ITS, which was cited in 2002 as a national role model for tax systems by the Federation of Tax Administrators. The FTA named the system as its Outstanding Technology Application for State Administrators that year.
Harley Duncan, the FTA's executive director, said he thinks that there likely are a few places in the tax refund process where a "fully functional" system would have flagged the alleged fraud scheme. For instance, he said that he would have expected the ITS to check parameters such as the number of refunds being issued, who they were paid to and where the approvals took place.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
- Identity Governance: The Business Imperatives
- This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make... All Security White Papers
- Live Webcast
Playing Defense: Staying on Top of Your Disaster Recovery Game - When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing...
- Introduction to VMware vCenter Site Recovery Manager 5
- Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to...
- The Top Ten Secrets to Avoiding SAN Performance Problems
- Maintaining peak performance while simultaneously addressing the root cause of SAN errors is challenging. Learn the most common SAN problems and explore new...
- Deduplication Without Compromise
- Go inside Quantum's scalable, high-performance, multi-protocol new DXi deduplication appliances, designed to make backup much more effective. Discover how the new future-proof DXi6700...
- Director of Disk Products Discusses DXi6700
- Discover how the new DXi 6700 series of deduplication appliances provide investment protection and a future-proof feature set, all while delivering fast, scalable,...
- Playing Defense: Staying on Top of Your Disaster Recovery Game
- When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing... All Security Webcasts