The authentication method for online tax records was not secure enough, as it was vulnerable to social engineering attacks. Criminals were able to access millions of historic tax records through the loophole, leading to a significant increase in fraudulent tax refund claims.