I still don’t understand how the criminals were able to use DRT to get tax information. You have to sign in with your FSA ID to link the taxes via DRT, and for creating a FSA ID you need name address and more, and that info is cross checked with the SSA.
So if they already had that information, then why bother with the DRT? The information in the DRT is from a tax return that was already processed two years prior.