US tax returns are surprisingly easy to hack