Criminals have hacked the online tax accounts of 100,000 taxpayers to claim GBP47 million of fraudulent repayments, HMRC has acknowledged. Most of the attacks were conducted by phishing using credentials obtained from non-HMRC sources to either set up new HMRC accounts or hijack existing ones, rather than by breaches of HMRC security. HMRC is writing...