Donald Trump sues IRS, Treasury for $10 billion over alleged leak of his tax returns
Former President Donald Trump has filed a federal lawsuit seeking $10 billion in damages from the Internal Revenue Service and the U.S. Department of the Treasury, alleging that government failures enabled the unlawful disclosure of his confidential tax return information. The complaint asserts that the leak—long a political flashpoint—violated federal privacy protections, caused substantial financial and reputational harm, and reflects systemic lapses in how the government safeguards sensitive taxpayer data.
The filing marks one of the most sweeping attempts by a public figure to hold federal agencies liable for the security of tax records. It also escalates Trump’s yearslong battle over the handling of his returns, which have figured prominently in investigative reporting, congressional oversight, and criminal prosecutions of a former IRS contractor who admitted to stealing and disseminating taxpayer data.
What the lawsuit claims
According to the suit, Trump’s tax return information was unlawfully accessed and disclosed to news organizations without authorization, in violation of federal law that mandates strict confidentiality for tax returns and return information. He alleges that federal agencies failed to implement and enforce adequate controls, training, monitoring, and auditing, allowing an outside contractor to obtain and distribute data on thousands of taxpayers, including him.
The complaint seeks at least $10 billion in damages and additional relief, including declaratory judgments that the government’s conduct was unlawful, orders to strengthen data security, and attorneys’ fees. The filing frames the episode as not merely an isolated breach but a breakdown in institutional safeguards that were supposed to protect highly sensitive financial data.
Legal backdrop: strict secrecy, limited damages
Federal law makes tax return information among the most tightly protected categories of personal data. Under 26 U.S.C. § 6103, returns and return information are confidential, and unauthorized disclosure by government employees or contractors is a crime. A related statute, 26 U.S.C. § 7431, allows taxpayers to sue for civil damages over unauthorized disclosures.
Those civil remedies, however, are constrained. Section 7431 permits recovery of actual damages (and in some cases statutory damages of $1,000 per act of disclosure), plus costs and possibly punitive damages against individuals in egregious cases. But punitive damages are generally not available against the United States itself, and plaintiffs must navigate sovereign immunity rules that strictly define when and how the government can be sued. The Privacy Act of 1974 presents another potential avenue, but the Supreme Court has limited “actual damages” under that law to proven economic losses, not emotional distress, further narrowing potential recoveries.
In practice, these frameworks make multibillion-dollar awards against federal agencies rare. Courts scrutinize whether plaintiffs can tie quantified financial harm to specific, unauthorized disclosures and whether the named defendants and legal theories fit within the narrow waivers of sovereign immunity.
A contractor’s guilty plea and a broader breach
Trump’s suit arrives after a high-profile criminal case established that an IRS contractor, Charles Littlejohn, stole and leaked confidential tax data on thousands of high-earning Americans. Littlejohn pleaded guilty in 2023 to unauthorized disclosure of tax return information and, in 2024, was sentenced to federal prison. Court filings in that case stated that he transmitted taxpayer data to media outlets, fueling news reports that included detailed discussions of Trump’s taxes and a wide-ranging investigative series about tax burdens among ultra-wealthy individuals.
The government’s prosecution underscored both the sensitivity of IRS-held data and the risks posed by insiders with system access. It also provided plaintiffs with a clearer factual record and a potential timeline for when victims could reasonably have discovered the government was the source of leaked data—an issue that can influence statutes of limitations in civil suits.
How the government may respond
The IRS and Treasury typically do not comment on pending litigation, but the Justice Department is expected to defend the agencies. Likely arguments include:
– Sovereign immunity: The United States may contend that some of Trump’s claims fall outside statutory waivers that permit suits over unauthorized disclosures, or that agencies are not proper defendants and the United States must be substituted as the sole defendant.
– Damages limits: Government lawyers often argue that plaintiffs cannot show quantifiable economic harm at the levels claimed, that statutory damages are capped per disclosure, and that punitive damages do not apply against the United States.
– Procedural defenses: The government may raise statute-of-limitations defenses, challenge venue or jurisdiction, and contest whether the complaint adequately pleads willful or grossly negligent conduct by federal officials as opposed to the criminal acts of a contractor.
– Discretionary function: If negligence claims are brought under the Federal Tort Claims Act, the United States may invoke the discretionary function exception, which shields policy-based decisions—even when arguably flawed—from liability.
Potential outcomes
The case could proceed through a familiar sequence: a government motion to dismiss, discovery if claims survive, and potentially summary judgment on legal issues such as damages and causation. If the court narrows the claims but allows some to proceed, the parties could face protracted discovery into IRS security protocols, contractor oversight, and audit trails—an unusually intrusive look at IRS operations. That, in turn, could increase pressure to settle.
For Trump, even partial success would be significant. A ruling that the government is liable for unauthorized disclosures could lead to damages, fee awards, and injunctive relief mandating stronger controls. For the government, a robust defense aims not only to limit exposure in this case but to avoid precedents that might spur a wave of high-dollar claims by others affected by the same breach.
Key context: multiple pathways to public release
Trump’s tax information entered the public domain through more than one channel. In addition to the contractor’s criminal disclosures, the House Ways and Means Committee, invoking its statutory authority, lawfully obtained and later released portions of Trump’s tax returns in late 2022 after extended litigation. That congressional release is governed by a separate legal regime and is unlikely to be actionable as an unauthorized disclosure. The lawsuit instead focuses on the illicit leak attributed to the contractor and the alleged security failures that permitted it.
Why it matters
– Privacy and public trust: The case spotlights the tension between the confidentiality of tax data and public interest in how powerful figures use the tax system. It also raises questions about whether the IRS has sufficiently modernized its systems and oversight in a world of insider threats.
– Precedent for victims of the breach: A ruling clarifying damages and liability could affect other lawsuits by taxpayers whose data was compromised, shaping the legal landscape for government data-breach claims.
– Political ramifications: Filed amid an election cycle, the suit enables Trump to argue that he—and by extension, ordinary taxpayers—were failed by federal institutions. Critics may portray the $10 billion demand as performative or unrealistic under existing law.
– Agency reforms: Regardless of the outcome, litigation pressure and congressional scrutiny could spur additional investments in auditing access logs, restricting contractor permissions, and enhancing insider-threat programs at the IRS.
What to watch next
– The government’s initial response, including any motion to dismiss and arguments on sovereign immunity and damages.
– How the court handles the statute of limitations and whether it starts from the public reporting of Trump’s returns or from later confirmation that the source was an IRS insider.
– Any discovery orders that might compel disclosures about IRS cybersecurity, access controls, and contractor management.
– Parallel cases by other affected taxpayers and whether courts converge on a consistent approach to damages and liability.
Even as the legal merits unfold, the lawsuit underscores a core principle of the U.S. tax system: confidentiality is not optional. If the court finds that federal safeguards fell short, the case could become a defining test of accountability for one of the government’s most sensitive data repositories. If not, it will still illuminate the strict statutory limits Congress has set on when, and how much, the United States can be made to pay for breaches of taxpayer privacy.
