Question to the HM Treasury:

To ask the Chancellor of the Exchequer, how many HMRC online accounts were reported as (a) compromised or (b) subject to unauthorised access in each of the last three financial years.

Information relating to suspected or confirmed account compromise is recorded across different systems and teams, reflecting variation in how fraud presents across HMRC services and channels. As a result, HMRC is unable to provide a comprehensive breakdown of the number of accounts reported as compromised or subject to unauthorised access for each of the last three financial years in the format requested.

HMRC continues to strengthen its capability to identify, respond to and manage compromised accounts, including improving incident management processes and developing more joined‑up approaches to monitoring and response across services.