Employer Identification Numbers are not private the way Social Security Numbers are. Whether an EIN is effectively public depends on the kind of business that holds it: nonprofits and publicly traded companies must disclose their EINs by law, while private companies and sole proprietors face narrower but still real exposure through state filings and the ordinary paperwork of doing business.
What Federal Law Actually Protects
26 U.S.C. 6103 bars IRS officers and employees from sharing a taxpayer’s return information, including identifying numbers, with unauthorized parties.1Office of the Law Revision Counsel. 26 USC 6103 – Confidentiality and Disclosure of Returns and Return Information That protection covers what the IRS holds. It does not follow the number out into the world. No federal statute stops a business from handing out its own EIN, and no federal statute stops a third party from publishing an EIN it lawfully obtained.
Because the number identifies an entity rather than a person, courts and agencies treat it with lower privacy expectations than an SSN. Banks, agencies, and vendors trade EINs constantly during verification, licensing, and payment reporting. And 26 U.S.C. 6109 requires businesses to put the number on returns, statements, and documents whenever IRS regulations call for it, which is often.2Office of the Law Revision Counsel. 26 USC 6109 – Identifying Numbers
Nonprofit EINs Are Public by Law
Tax-exempt organizations face the broadest disclosure requirements of any business type. Under 26 U.S.C. 6104, groups described in Section 501(c) or 501(d) must make copies of their annual returns — typically Form 990 — available for public inspection.3Office of the Law Revision Counsel. 26 USC 6104 – Publicity of Information Required From Certain Exempt Organizations and Certain Trusts The EIN is a required field on every Form 990, so anyone who pulls the filing sees the number.
The IRS runs a free Tax Exempt Organization Search that lets anyone check exempt status, view Form 990 filings, and confirm a determination letter.4Internal Revenue Service. Tax Exempt Organization Search Third-party sites such as ProPublica’s Nonprofit Explorer aggregate the same 990 data into searchable databases, so a nonprofit’s EIN, revenue, expenses, and executive pay are usually a few seconds away.
Publicly Traded Companies Disclose Their EIN in SEC Filings
Companies that sell stock to the public file periodic reports with the Securities and Exchange Commission, including annual reports on Form 10-K and quarterly reports on Form 10-Q.5U.S. Securities and Exchange Commission. Exchange Act Reporting and Registration The cover page of Form 10-K has a designated field for the company’s IRS Employer Identification Number.6U.S. Securities and Exchange Commission. Form 10-K
These filings go through the SEC’s EDGAR system and become publicly available as soon as they are filed. Anyone can search EDGAR for free by company name or Central Index Key and filter by filing type or date.7U.S. Securities and Exchange Commission. How Do I Use EDGAR A large public company has no way to shield its EIN.
Private Companies and Sole Proprietors
Private businesses have more control, but “private” is not the same as hidden. Most states require formation documents and ongoing annual or biennial reports to keep a business in good standing. Formation documents usually predate the EIN and often don’t contain it, but later filings sometimes do. Many states run online business search databases that let anyone pull filed documents. Whether the full EIN appears depends on the state — some redact identifiers, others display them openly. Even a small private company may find its number visible through filings it had no option to skip.
Sole proprietors sit in a different position. Without an EIN, they must use their SSN on business tax forms. The IRS only requires a sole proprietor to get an EIN if they have employees, file certain excise tax returns, or withhold taxes on payments to nonresident aliens.8Internal Revenue Service. Employer Identification Number Many still apply voluntarily so they can put an EIN on W-9s, 1099s, invoices, and credit applications instead of their SSN. An exposed EIN is a problem; an exposed SSN can be used to open personal credit, file fraudulent individual returns, or commit other personal identity theft.
Where Your EIN Already Appears
Once a business starts operating, its EIN circulates through routine paperwork that reaches employees, contractors, lenders, insurers, and vendors. That distribution is what makes the number hard to keep quiet, regardless of what state or federal filings say.
- Form W-2, which employers must include their EIN on for every employee.9Internal Revenue Service. About Form W-2, Wage and Tax Statement
- Form W-9, provided to clients and vendors who need a taxpayer identification number for payment reporting.
- Form 1099-NEC, filed when a business pays a contractor $600 or more; the IRS does not allow the payer’s EIN to be truncated on filed copies.10Internal Revenue Service. Instructions for Forms 1099-MISC and 1099-NEC
- Business credit reports from commercial bureaus, which lenders and potential partners can purchase.
- Invoices, service agreements, and contracts.
- Insurance certificates and permit applications.
How Someone Can Look Up an EIN
There is no single public database of all business EINs. The right method depends on the entity:
- For a nonprofit, use the IRS Tax Exempt Organization Search or a Form 990 database and read the number off the return.4Internal Revenue Service. Tax Exempt Organization Search
- For a publicly traded company, pull the most recent 10-K or 10-Q on EDGAR and check the cover page.7U.S. Securities and Exchange Commission. How Do I Use EDGAR
- For a private company, try the state’s online business registration database, request a W-9 if you have a business relationship, or buy a commercial credit report from Dun & Bradstreet, Experian, or Equifax.
- For your own business, check a prior tax return, the original IRS assignment notice (CP 575), or a bank account application. You can also call the IRS Business and Specialty Tax Line.
What Exposure Actually Costs You
Because EINs move around so freely, they are a common tool for business identity theft. Someone using your business name and EIN can open lines of credit, take out loans, or file fraudulent returns. The business is left with unauthorized debt, damaged credit, and the cost of unwinding the mess.
The IRS flags several signs that an EIN may have been compromised: a return rejected because one was already filed under your EIN, a rejected filing extension for the same reason, an unexpected transcript or notice, IRS Letter 6042C or 5263C, or a sudden stop in routine IRS mail because your address of record was changed.11Internal Revenue Service. Identity Theft Information for Businesses Thieves also use stolen EINs to obtain business credit cards, reroute vendor payments, or spin up look-alike entities that trade on the original company’s reputation.
If you suspect fraudulent returns or W-2s filed under your business name or EIN, the IRS directs you to submit Form 14039-B, the Business Identity Theft Affidavit, with the requested supporting documents and a signature.12Internal Revenue Service. Report Identity Theft for a Business One thing the IRS cannot do is cancel an assigned EIN. You can ask the agency to deactivate the number by letter once all returns are filed and taxes paid, but the number itself stays associated with the entity on IRS records.13Internal Revenue Service. If You No Longer Need Your EIN