Criminals use IRS website to steal data on 104,000 people