HMRC has confirmed that it has fallen victim to a fraudulent attack. Criminals successfully used stolen login details for personal tax accounts we believe they used these to apply for tax refunds. It does not appear that HMRC’s systems have been hacked, and those accounts known to have been affected have been locked. HMRC will be writing to those people affected asking them to set up a new Government Gateway login. If you receive a letter or your account appears to have been altered, you need to act.

Key Points:
- Around 100,000 Personal Tax Accounts have been locked by HMRC.
- This was not a cyberattack on HMRC itself – fraudsters used stolen credentials to try and claim refunds.
- No money was taken from individuals – the fraud was aimed at HMRC.
- Affected accounts have had their login details deleted as a precaution.
- Letters will be sent between 4 June and 25 June 2025 to those affected.
- If you receive a letter, you’ll need to set up a new Government Gateway ID and password.
- If you don’t receive a letter, your account is unlikely to be affected.
How We Can Help
If you receive a letter or have concerns:
- Get in touch – we can guide you through setting up new login details.
- We’re on hand to support you and answer any questions
Speak to Our Tax Team
Our experienced tax team at Botham Accounting supports individuals and businesses with all aspects of personal tax, HMRC queries, and compliance. If you’re unsure how this affects you, or you want help managing your personal tax account securely, we’re here to help. Please call Angela or Brandon on 0115 950 887 or get in touch with our team below.