Reports

The Office of the Inspector General audited the Tennessee Valley Authority’s (TVA) use of remote application and desktop virtualization client due to the risks of (1) potential system intrusion through misconfigurations and (2) continued elevated remote users during the COVID-19 pandemic. We found the configuration management control for TVA’s remote application desktop virtualization client was ineffective. However, we determined compensating access controls were in place to mitigate the risk to an overall acceptable level.

This update expands on our January 2023 Fraud Alert that identified 69,000 questionable Social Security Numbers (SSNs) used to obtain $5.4 billion in potentially fraudulent loans made in the COVID-19 Economic Injury Disaster Loan (EIDL) program and Paycheck Protection Program (PPP). As detailed in that Fraud Alert, PRAC data scientists, using our Pandemic Analytics Center of Excellence, identified the questionable SSNs after determining that the names, SSNs, and/or dates of birth used in connection with COVID-19 EIDL/PPP applications did not match Social Security Administration’s (SSAs)...

The PRAC’s Pandemic Analytics Center of Excellence (PACE) data scientists identified $5.4 Billion in potential identity fraud associated with over 69,000 questionable Social Security Numbers (SSNs) used on applications across disbursed loans in the Small Business Administration’s COVID-19 Economic Injury Disaster Loan Program and Paycheck Protection Program. Through collaborative verification methods with the Social Security Administration, we identified that these SSNs were used in connection with over 99,000 applications and warrant further scrutiny. The results of this Fraud Alert...

This report is a summary of the Pandemic Response Accountability Committee’s accomplishments between April 1, 2022, and September 30, 2022.

Recognizing how critical telehealth has been to the federal COVID-19 response, the PRAC Health Care Subgroup—which includes six Federal Offices of Inspectors General—worked together to provide insights on the use of telehealth and its associated program integrity risks.

The Pandemic Response Accountability Committee (PRAC) is issuing this Risk Advisory to notify Small Business Administration (SBA) management of potential identity or other fraud in its COVID-19 Economic Injury Disaster Loan (EIDL) program, EIDL Advance program, and Paycheck Protection Program. The PRAC identified possible identity or other fraud in one or more of these SBA programs involving 945 minors (under 18 years old) and 231 elderly individuals (80 years and older) who are also listed as household members in the Department of Housing and Urban Development’s Low Rent and/or Housing Choice...