President Donald Trump has filed a $10 billion civil lawsuit against the Internal Revenue Service and the U.S. Treasury Department, accusing the agencies of failing to protect his confidential tax records in a data breach that reverberated through American politics and public trust. The case, lodged in federal court in Florida last week, seeks sweeping damages for what Trump’s lawyers describe as a profound breach of federal privacy law.
A Lawsuit Rooted in a Historic Data Leak
The lawsuit, filed on January 29, 2026 in the Southern District of Florida, centres on the unauthorised disclosure of Trump’s tax returns by Charles “Chaz” Littlejohn, a former IRS contractor. Littlejohn illegally accessed and shared the records while working at the tax agency between 2017 and 2021, disclosures that became public between 2019 and 2020.
Trump is joined as a plaintiff by his sons Donald Trump Jr. and Eric Trump, along with the Trump Organization. Together, they argue that federal authorities failed in their most basic duty to safeguard some of the country’s most sensitive personal data.
Claims of “Significant and Irreparable Harm”
In the 27-page complaint, Trump’s legal team asserts that the disclosure caused “significant and irreparable harm,” citing reputational damage, financial losses and public embarrassment. The filing argues that the release of tax information painted the former president and his business empire “in a false light,” undermining commercial relationships and public standing.
At the core of the lawsuit is a blunt accusation: that the IRS and Treasury Department failed to implement proper security controls to detect and prevent unauthorised access.
“Defendants had a duty to safeguard and protect Plaintiffs’ confidential tax returns and related tax return information from such unauthorised inspection and public disclosure,” the court filing states, adding that the agencies were obligated to maintain adequate screening, monitoring and technical safeguards. “Defendants failed to take such mandatory precautions.”
The Contractor at the Centre of the Case
Littlejohn, who worked as a contractor for the IRS through the consulting firm Booz Allen Hamilton, pleaded guilty in October 2023 to a federal charge of unlawful disclosure of tax return information. His conviction removed any doubt that the leak violated U.S. law.
In May 2024, Littlejohn began serving a five-year prison sentence. The IRS later issued a formal apology to Trump and other individuals whose tax data had been compromised, acknowledging the seriousness of the breach.
Treasury Moves to Sever Contractor Ties
As the civil case took shape, the Treasury Department announced an additional step. On January 27, 2026, Treasury Secretary Scott Bessent said the government had cancelled all remaining federal contracts with Booz Allen Hamilton connected to the leak.
The move was widely interpreted as an attempt to demonstrate institutional accountability and to reassure the public that such a breach would not be repeated.
A Test of Government Accountability
While Littlejohn is behind bars, Trump’s lawsuit shifts the spotlight from the individual offender to the system that employed him. The legal argument is straightforward: even a “rogue” employee should not be able to access and extract years of taxpayer data without triggering alarms.
The complaint frames the IRS’s internal controls as a vault left unlocked, arguing that the agencies’ failure exposed not just Trump, but the integrity of the U.S. tax system itself.
Broader Implications Beyond U.S. Politics
Though rooted in a uniquely American political saga, the case carries broader lessons for governments worldwide, including in Europe and small states like Malta that increasingly rely on digital systems and private contractors to manage sensitive information.
The lawsuit underscores the risks of outsourcing critical government functions and highlights the global challenge of safeguarding confidential data in an era where a single breach can echo across borders.
What Comes Next
The IRS and Treasury Department have not yet filed a detailed response to the lawsuit. Legal experts expect the government to argue that existing safeguards met statutory requirements and that Littlejohn acted outside the scope of his authorised duties.
For now, the case stands as one of the most consequential privacy lawsuits ever brought against U.S. tax authorities — a legal battle that could redefine the limits of government liability when trust in public institutions is breached.
