Intuit introduced several changes to beef up the security of customer accounts following a spike in tax refund fraud. The changes dont go far enough, but TurboTax should also be leading the industry in security. Intuit failed to take basic steps to validate key account information, such as email addresses and mobile numbers. TurboTax still does not require new users to verify their email address, a basic security precaution that even random Internet forums don’t collect nearly as much sensitive data require of all new users.”]
Source: https://krebsonsecurity.com/2015/03/intuit-failed-at-know-your-customer-basics/