A major reduction in the US Internal Revenue Service workforce has left the agency facing another challenge: hundreds of computers and mobile devices assigned to departing employees remain unaccounted for.
An audit by the Treasury Inspector General for Tax Administration (TIGTA) identified 594 missing IT assets associated with employees who left the IRS, raising concerns over both asset management and the potential exposure of sensitive taxpayer information.
The devices have an estimated combined value exceeding $270,000. But the financial value of the equipment may be secondary to the information potentially stored on it.
Hundreds of Devices Still Unaccounted For
The findings come against the backdrop of a substantial reduction in the IRS workforce.
Following the departure of approximately 22,000 employees, TIGTA found that 594 IT assets remained unaccounted for as of April 2026.
The equipment includes devices such as laptops and smartphones that had been assigned to IRS personnel.
The findings highlight the operational challenge of managing IT equipment during a large-scale workforce reduction, particularly where departing employees may have had access to sensitive government and taxpayer information.
The Bigger Concern: What Is Stored on the Devices?
The principal risk identified by TIGTA is not simply that government-owned hardware cannot be located.
According to the audit, the devices’ hard drives and memory had not been cleared, meaning they could potentially contain sensitive taxpayer information.
Because the IRS could neither locate the equipment nor establish that it had been properly returned, TIGTA indicated that the devices should be considered potentially stolen rather than merely missing.
Importantly, the audit does not provide evidence that taxpayer information has actually been accessed, disclosed or otherwise compromised.
The finding instead identifies a potential information-security exposure: the IRS cannot account for the equipment and therefore cannot confirm what has happened to any information potentially stored on it.
More Than $270,000 in Government Equipment
The missing assets have an estimated combined value of more than $270,000.
While this represents a direct financial loss if the equipment cannot ultimately be recovered, the potential value of the information stored on the devices could make the cybersecurity implications considerably more significant.
Tax authorities routinely process highly sensitive information relating to individuals and businesses, including tax returns, financial records and identifying information.
Effective control over devices capable of accessing or storing such information is therefore an important component of taxpayer data protection.
Large-Scale Departures Put Offboarding Controls Under Pressure
The findings also illustrate the administrative complexity created when thousands of employees leave an organisation over a relatively short period.
Employee offboarding in a tax administration involves considerably more than terminating employment records.
Access credentials need to be disabled, system permissions withdrawn, identification credentials recovered and physical equipment returned. Devices may then need to be securely wiped, reassigned or disposed of in accordance with information-security procedures.
Failures at any stage can create gaps between personnel records, asset inventories and cybersecurity controls.
With approximately 22,000 employees leaving the IRS, TIGTA’s finding suggests that asset-recovery procedures did not fully account for all equipment assigned to departing personnel.
Tax Administration Is Increasingly a Data-Security Issue
Digitalisation has transformed the amount and sensitivity of information held by tax administrations.
Tax authorities increasingly rely on interconnected systems, electronic filings, data analytics and automated compliance processes. At the same time, employees may access those systems through laptops, smartphones and other portable equipment.
That makes physical control over IT assets part of the broader cybersecurity framework surrounding modern tax administration.
A missing laptop may have a relatively modest replacement cost. A missing device that potentially contains taxpayer information presents a different category of risk.
The IRS case therefore highlights the importance of ensuring that major organisational changes — including workforce reductions — are accompanied by robust processes covering asset recovery, access termination and secure deletion of information.
Frequently Asked Questions
How many IRS devices are missing?
According to the TIGTA audit, 594 IRS IT assets remained unaccounted for as of April 2026 following the departure of approximately 22,000 employees.
What types of IRS devices are missing?
The unaccounted-for IT assets include equipment such as laptops and smartphones that had been assigned to IRS personnel.
How much are the missing IRS devices worth?
The 594 unaccounted-for IT assets have a combined estimated value of more than $270,000.
Could the missing IRS devices contain taxpayer information?
Yes. TIGTA found that the devices’ hard drives and memory had not been cleared, meaning they could potentially contain sensitive taxpayer information.
Has IRS taxpayer data been compromised?
The audit provides no evidence that taxpayer information was actually accessed or compromised.
The concern is instead that because the IRS cannot locate the equipment, it cannot establish what information may remain stored on the devices or who may currently possess them.
Does TIGTA consider the missing devices stolen?
TIGTA indicated that because the IRS cannot locate the devices or confirm that they were returned, the assets should be considered potentially stolen rather than simply missing.
This does not establish that all 594 devices were stolen. Rather, it reflects the fact that their whereabouts cannot currently be verified.
What is TIGTA?
TIGTA stands for the Treasury Inspector General for Tax Administration.
It provides independent oversight of the IRS, including audits and investigations relating to tax administration, IRS operations, cybersecurity and the protection of taxpayer information.
What Happens Next?
The immediate issue for the IRS is straightforward but potentially difficult to resolve: determining whether the missing equipment can still be recovered and establishing what information, if any, remains stored on it.
The audit does not conclude that taxpayer data has been compromised. But with 594 devices still unaccounted for and their memories not confirmed as cleared, the potential exposure remains unresolved.
For an organisation entrusted with some of the most sensitive financial information held by the U.S. government, the issue extends well beyond the replacement cost of several hundred laptops and smartphones.
The key question is therefore not simply what happened to $270,000 worth of equipment.
It is what may be sitting on those devices — and where they are now.